← All tools

Commix

https://github.com/commixproject/commix

Open Source ◆ Kali Linux

Categories

Web Application

Description

Automated all-in-one OS command injection and exploitation tool. Detects and exploits command injection vulnerabilities in web applications with various techniques and payloads.

Keywords

command injection OS command RCE remote code execution web application exploitation

Example Usage

python3 commix.py --url "https://example.com/page?ip=127.0.0.1" --level=3
python3 commix.py --url "https://example.com" --data="field=value" --os-shell

See also

EyeWitness

Open Source Kali

Takes screenshots of web pages, RDP, and VNC services. Reports on default credentials and interestin…

Burp Suite

Freemium Kali

Leading platform for web application security testing. The Community Edition includes an interceptin…

NoSQLMap

Open Source

Automated NoSQL injection and database exploitation tool. Targets MongoDB, CouchDB, Redis, and Cassa…

Interactsh

Open Source

Out-of-band interaction gathering server. Generates unique collaboration URLs for detecting blind vu…

…

Check your WAF before an attacker does…