Find your API Security Test

Jumpstart your API Security testing with our pre-built YAML tests. A library of 100+ API Security tests and growing everyday

Search…

Command Injection

Clear filter

command-injection

Command injection by adding query parameters

This test explores various query parameter names for potential command injection, such as cmd, exec, command, execute, ping, and query.

command-injection

Kernel open command injection in Ruby

Replacing request parameters with bash commands in a Ruby on Rails app test can lead to command injection due to the use of 'Kernel#open' and the presence of shell injection vulnerability.