Commix Project turns command injection from theory to proof: detecting it, exploiting it, and understanding it - the tool, a testbed to validate findings against, and the research and documentation tying them together. Development traces back to 2014.
| Repository | Role |
|---|---|
| commix | The tool itself - detects and exploits command injection, from first hint to a working shell. |
| commix-testbed | Intentionally vulnerable targets commix is built and tested against. |
| commix-to-burp | Brings commix’s exploitation into Burp Suite. |
| commixproject.github.io | Source behind commixproject.com and its documentation. |
Contributions, bug reports, feature requests, and documentation improvements are welcome.
Note
Please refer to the contribution guidelines of the relevant repository before submitting changes.
Commix Project is distributed under the GNU General Public License v3.0.
