Mastering Command Injection - The Ultimate Hands-On Course

Name: Mastering Command Injection - The Ultimate Hands-On Course
Rating: 4.7 (215 reviews)

How to Find, Exploit and Defend Against Command Injection Vulnerabilities. For Ethical Hackers, Developers & Pentesters

Created byExperts with David Bombal, Rana Khalil, David Bombal

Last updated 10/2023

English

What you'll learn

Learn how to find command injection vulnerabilities from a black box and white box perspective.
Gain hands-on experience exploiting command injection vulnerabilities using Burp Suite Community and Professional editions.
Learn secure coding practices to prevent and mitigate command injection vulnerabilities.
Learn how to exploit command injection vulnerabilities of varying difficulty levels.
Learn how to automate attacks in Python.

Course content

6 sections • 17 lectures • 2h 8m total length

Course Introduction2:23

Lab Environment Setup7:21
Lab #1 OS command injection, simple case17:57
In this video, we cover Lab #1 in the Command Injection module of the Web Security Academy. This lab contains an OS command injection vulnerability in the product stock checker. The application executes a shell command containing user-supplied product and store IDs, and returns the raw output from the command in its response. To solve the lab, we execute the whoami command to determine the name of the current user.
Lab #2 Blind OS command injection with time delays19:27
In this video, we cover Lab #2 in the Command Injection module of the Web Security Academy. This lab contains a blind OS command injection vulnerability in the feedback function. The application executes a shell command containing the user-supplied details. The output from the command is not returned in the response. To solve the lab, we exploit the blind OS command injection vulnerability to cause a 10 second delay.
Lab #3 Blind OS command injection with output redirection25:45
In this video, we cover Lab #3 in the Command Injection module of the Web Security Academy. This lab contains a blind OS command injection vulnerability in the feedback function. The application executes a shell command containing the user-supplied details. The output from the command is not returned in the response. However, you can use output redirection to capture the output from the command. There is a writable folder at: /var/www/images/.
The application serves the images for the product catalog from this location. You can redirect the output from the injected command to a file in this folder, and then use the image loading URL to retrieve the contents of the file. To solve the lab, we execute the whoami command and retrieve the output.
Lab #4 Blind OS command injection with out-of-band interaction6:29
In this video, we cover Lab #4 in the Command Injection module of the Web Security Academy. This lab contains a blind OS command injection vulnerability in the feedback function.
The application executes a shell command containing the user-supplied details. The command is executed asynchronously and has no effect on the application's response. It is not possible to redirect output into a location that you can access. However, you can trigger out-of-band interactions with an external domain.
To solve the lab, we exploit the blind OS command injection vulnerability to issue a DNS lookup to Burp Collaborator.
Lab #5 Blind OS command injection with out-of-band data exfiltration7:28
In this video, we cover Lab #5 in the Command Injection module of the Web Security Academy. This lab contains a blind OS command injection vulnerability in the feedback function.
The application executes a shell command containing the user-supplied details. The command is executed asynchronously and has no effect on the application's response. It is not possible to redirect output into a location that you can access. However, you can trigger out-of-band interactions with an external domain.
To solve the lab, we execute the whoami command and exfiltrate the output via a DNS query to Burp Collaborator.

Requirements

Basic knowledge of computers (i.e. how to use the internet).
Basic knowledge of web fundamentals (HTTP requests, methods, cookies, status codes, etc.).
Latest version of Kali Linux VM (free download).
PortSwigger Web Security Academy account to access the labs (free registration).

Description

Command Injection is a critical security vulnerability that allows an attacker to execute arbitrary operating system commands on the server running the application, often leading to complete remote code execution. Therefore, mastering the ability to identify and exploit command injection vulnerabilities has become an essential and foundational skill.

In this course, we dive into the technical details behind command injection vulnerabilities. We explore methods for detecting these vulnerabilities from both black-box and white-box perspectives, along with various techniques for exploiting them. Moreover, we provide insights into preventive and mitigative measures to safeguard against command injection attacks.

This course goes beyond the basics, offering a well-balanced blend of theoretical knowledge and practical experience! It contains five hands-on labs of varying complexity levels, guiding you through the process of manually exploiting the vulnerability and then scripting and automating your exploits using Python.

By the end of this course, you'll not only have a solid understanding of command injection vulnerabilities, but also the ability to identify and exploit these vulnerabilities in real-world applications. We've designed the course content to be beginner-friendly, so you'll never feel overwhelmed.

Whether you are a penetration tester, an application security specialist, a bug bounty hunter, a software developer, an ethical hacker, or simply someone intrigued by web application security, this course is for you!

Who this course is for:

Penetration testers that want to understand how to find and exploit command injection vulnerabilities.
Software developers that want to understand how to defend against command injection vulnerabilities.
Bug bounty hunters that want to understand how to find and exploit command injection vulnerabilities.
Individuals preparing for the Burp Suite Certified Practitioner (BSCP) exam.
Individuals preparing for the OSWE certification.

Mastering Command Injection - The Ultimate Hands-On Course

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 2min

Getting help2 lectures • 5min

Command Injection - Technical Deep Dive6 lectures • 29min

Lab Environment Setup1 lecture • 7min

Hands-On Command Injection Labs6 lectures • 1hr 24min

Bonus Lecture1 lecture • 1min

Requirements

Description

Who this course is for: