The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, ZAP, Nuclei, SkipFish, and Wapiti.

OS Command Injection Vulnerability Payload List

An API for escaping different kind of queries

A collection of payloads for different vulnerabilities, best payload lists in one repository

Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)

Executing shell commands via HTTP server

Writeups for portswigger labs.

Exploit for CVE-2017-12945.

A threat actor may inject arbitrary operating system (OS) commands on target

Executing shell commands via UDP server

WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.

An example of how custom commands are executed on a cloud server if an application is vulnerable to os command injection

SQL Injection and OS Command Injection demo application.