domains / families / security / cmdi-command-injection

cmdi-command-injection

separate

Command injection playbook. Use when user input may reach shell commands, process execution, converters, import pipelines, or blind out-of-band command sinks.

When to use

• shell metacharacters
• blind injection
• time-based detection
• OOB exfiltration
• polyglot payloads
• real-world code patterns
• injection through unexpected input vectors

Skill page

Source