Blind OS command injection with out-of-band interaction – PortSwigger Write Up
Learn to detect blind command injection vulnerabilities using out-of-band techniques with DNS lookups to external servers.
1 contribution in the year 2026
3 contributions in the year 2025
12 contributions in the year 2024
7 contributions in the year 2023
49 contributions in the year 2022
18 contributions in the year 2021
Hey there 👋. I’m Juan Antonio González Mena, although many people know me as Sikumy. I’m 24 years old and have been working in the cybersecurity world for over four years. I’m also the creator of this blog you’re reading.
Deep Hacking started as simple personal notes. Over time it grew, evolved, and through its ups and downs, has become what it is today: a space created by and for the community.
I don’t know how far this project will go or what paths it will take, but what I do know is that my goal is for it to become a technical reference. Time will tell. In the meantime, I’d love for you to join me on this journey.
Learn to detect blind command injection vulnerabilities using out-of-band techniques with DNS lookups to external servers.
Complete guide on LFI vulnerability: exploitation techniques, bypasses, and methods to convert a Local File Inclusion into remote command execution.
Complete guide on exploiting PHP Wrappers in web vulnerabilities, including techniques with php://filter, zip://, data://, php://input and expect:// for LFI and XXE.
Learn to exploit blind command injection vulnerabilities by redirecting output to accessible files to read the output of executed commands.
This author has not published articles yet.
If you like the content and want to support the project, you can buy me a coffee. Your support helps keep the site active and create more quality content.
Buy me a coffeeThanks for your support 🙏