Commix Project is an open source effort around command injection: detecting it, exploiting it, and understanding it - the tool, a testbed to validate findings against, and the research and documentation tying them together. Development traces back to 2014.
| Repository | Role |
|---|---|
| commix | The tool itself - detects and exploits command/code injection, from proof to shell. |
| commix-testbed | Intentionally vulnerable applications the tool is built and validated against. |
| commixproject.github.io | Source of commixproject.com and its documentation. |
- Wiki / user's manual - usage, techniques, filter bypasses, etc.
- Changelog - what's new.
Contributions, bug reports, feature requests, and documentation improvements are welcome.
Note
Please refer to the contribution guidelines of the relevant repository before submitting changes.
Commix Project is distributed under the GNU General Public License v3.0.
