How To: Command Injections

This blog post is a practical guide to command injection vulnerabilities: defining the class (distinct from RCE), demonstrating detection techniques (timing attacks using sleep, command substitution, separators and piping), showing exploitation for both generic and blind injections (including remote exfiltration techniques), and discussing bypasses and mitigations (brace expansion, whitespace filtering) with Ruby proof-of-concept scripts and payload examples.