OS command injection, simple case - PortSwigger Write Up
Step-by-step solution for PortSwigger's OS command injection, simple case lab. Learn how to exploit operating system command injection vulnerabilities.
3 contributions in the year 2025
12 contributions in the year 2024
7 contributions in the year 2023
49 contributions in the year 2022
18 contributions in the year 2021
Hey there 👋. I’m Juan Antonio González Mena, although many people know me as Sikumy. I’m 24 years old and have been working in the cybersecurity world for over four years. I’m also the creator of this blog you’re reading.
Deep Hacking started as simple personal notes. Over time it grew, evolved, and through its ups and downs, has become what it is today: a space created by and for the community.
I don’t know how far this project will go or what paths it will take, but what I do know is that my goal is for it to become a technical reference. Time will tell. In the meantime, I’d love for you to join me on this journey.
Step-by-step solution for PortSwigger's OS command injection, simple case lab. Learn how to exploit operating system command injection vulnerabilities.
Explanation of the Shellshock vulnerability (CVE-2014-6271), its origin, how it works, and how to exploit it remotely to achieve command execution on web servers.
Learn various techniques for obtaining reverse shells on Windows systems, from netcat to PowerShell scripts to fully interactive ConPtyShell.
Learn what LocalAccountTokenFilterPolicy is in Windows, how it affects remote command execution with local administrative accounts, and how to disable it for pentesting purposes.
This author has not published articles yet.
If you like the content and want to support the project, you can buy me a coffee. Your support helps keep the site active and create more quality content.
Buy me a coffeeThanks for your support 🙏