Command Injection Detection

Detects command injection vulnerabilities where user input is passed to OS command execution

zakirkun 30f6b27 2 files · 916 B Updated

File contents

Command Injection Detection

Overview

Command injection occurs when an application passes user-supplied data to a system shell or OS command without proper sanitization.

Remediation

Avoid using shell commands with user input. If necessary, use allowlists and never pass raw user input to command execution functions.

zakirkun/ice-tea/tree/main/skills/injection/command-injection commit 30f6b27399

Frequently asked questions

npx skillmds@latest add zakirkun/command-injection-detection