command-injection

Linux Privesc

Wildcard Injection on Linux: tar, chown, and rsync Pitfalls

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Web Exploitation

OS Command Injection: From Shell Metacharacters to Blind Exfiltration and Filter Bypass

A practical guide to OS command injection: shell metacharacters, blind techniques, IFS-based filter bypass, and blue-team defenses.