Command Injection

Learn about OS command injection — how applications that pass user input to system commands can be exploited to execute arbitrary commands on the server. Covers both verbose (output displayed) and blind (no output) command injection, common payloads for Linux and Windows, input sanitization defenses, and a practical exercise exploiting a network diagnostic tool (ping) to read sensitive files as www-data.