commixproject/commix
Commix
Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server.
The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection strings through filter-specific obfuscations before delivery, while a session-persistent exploitation state stores discovered injection points, successful payloads, and target metadata in reloadable session files for continued exploitation across testing sessions.
Commix includes a recursive web crawler that discovers linked pages and forms from a starting URL, feeding endpoints into the injection scanner for comprehensive testing. It supports file-based target ingestion from text files, an interactive configuration wizard that guides operators through building scan parameters, and post-exploitation capabilities for reading and writing files on the target filesystem. The tool also provides verbose execution logging to help users understand each step of the injection attempt.
Features
- Command Injection Exploiters - Automates the detection and exploitation of OS command injection vulnerabilities to execute arbitrary commands on target servers.
- Tamper Script Pipelines - Transforms raw injection strings through a chain of modular tamper scripts for filter-specific obfuscation.
- Automated Detection Tools - Automates the discovery of command injection vulnerabilities by testing user-supplied input vectors.
- URL-Based Probing Tools - Accepts a target URL and probes it for command injection vulnerabilities using configurable HTTP methods and parameters.
- Heuristic Injection Detectors - Probes input vectors with test payloads and analyzes response differences to identify command injection vulnerabilities.
- Injection Payload Crafters - Encodes, tampers, and selects payloads to evade web application firewalls and filtering during exploitation.
- Web Application Firewall Bypassers - Applies multi-layer filter bypass strategies and payload tamper scripts to evade input sanitization and WAF rules.
- Tamper Pipeline Obfuscators - Transforms injection strings through a modular tamper pipeline of filter-specific obfuscation scripts to evade WAFs.
- Command Injection Scanners - Crawls websites and probes user inputs for command injection flaws with recursive discovery and heuristic detection.
- Filter Bypasses - Applies a collection of techniques to evade common web application firewall rules and input sanitization filters.
- Multi-Layer Filter Bypass Engines - Evaluates input constraints in layers and composes independent bypass strategies into a single payload.
- Heuristic Detection Techniques - Probes targets with heuristics and configurable techniques to identify command injection points.
- Recursive Crawl Discoverers - Recursively crawls a website starting from a given URL to discover pages to test for injection.
- Recursive Discovery Crawlers - Crawls websites from a starting URL to discover linked pages and forms, then feeds endpoints into the injection scanner.
- Exploitation State Persisters - Stores discovered injection points, successful payloads, and target metadata in reloadable session files.
- Scan Configuration Wizards - Guides operators through a step-by-step questionnaire to build complete scan configurations before execution.
- Security Detection Wizards - Offers an interactive wizard that guides users step by step through configuration options for automated command injection testing.
- Post-Exploitation File Operations - Reads files from or writes files to the target host's filesystem after a successful command injection.
- File-Based Target Loading - Reads multiple target URLs or HTTP requests from a file and tests each one for command injection.
- Penetration Testing Frameworks - Enumerates system information, reads and writes files, and manages session-persistent exploitation state on target servers.
- Whitespace Substitution Bypasses - Replaces spaces with shell internal field separators or tabs to preserve argument separation when whitespace is stripped.
- Shell Variable Expansion Substitutions - Substitutes all whitespace characters with shell variable expansions that expand to whitespace at runtime.
- Nested Quote Escaping Techniques - Escapes or terminates multiple layers of quotes to inject commands when input is enclosed in nested quoting.
- Post-Exploitation System Enumerators - Retrieves details about the target host such as users, privileges, hostname, and operating system after successful exploitation.
- Injection-Focused Crawlers - Recursively crawls a starting URL to discover linked pages and forms, then feeds endpoints into the injection scanner.
- Vulnerability Scanners - Automated OS command injection exploitation tool.
- Web Application Scanners - Automated tool for finding and exploiting command injection vulnerabilities.
- Command Injection - Automates the detection and exploitation of OS command injection flaws.
- Exploitation and Payloads - Automated tool for OS command injection.
- Exploitation Tools - Automates OS command injection and exploitation.
- Fuzzing and Injection - Automated OS command injection and exploitation tool.
- Security Tools - Automated OS command injection and exploitation tool
- Specialized Vulnerability Scanners - Automated tool for detecting and exploiting command injection vulnerabilities.
- Web Exploitation Tools - Automated command injection and exploitation for operating systems.
- Web Security - Automates OS command injection and exploitation.
