Command Injection
- Blind injection
- Verbose injection
Blind Injection
- Check via ping, open a
tcpdump on ICMP to listen for packets
- Redirect to logfile and read
- Use
sleep or timeout to check if ci is possible in general
Functions
- Watch out for
eval()exec()passthru()system()