Detecting OS command injection
Command injection is another input validation error, which derives in the interaction directly with the operating system. It is usually because the application is using a function, such as exec(), execve(), or system().
Like SQL injections and all the vulnerabilities described in this chapter, OS command injection could be detected by using the scanner method and following similar steps. So, we will describe how to detect this vulnerability in a manual way.
Manual detection
To detect command injection vulnerabilities, open Burp Suite and intercept the request where you think there is a potential vulnerability.
We think there is a vulnerability in the IP parameter. The normal application's flow is that the user inserts an IP address, and then the application executes a ping to this IP address. If we try to imagine what is happening in the backend, we can suppose that the IP parameter is received by a variable in PHP; then it is concatenated with the string ping...
