Commix is an open source penetration testing tool that automates the detection and exploitation of command injection vulnerabilities.
Use this tool only on systems you own or have explicit permission to test.
Commix (short for [comm]and [i]njection e[x]ploiter) is an open source penetration testing tool, written by
Anastasios Stasinopoulos (
@ancst), that automates the detection and exploitation of command injection vulnerabilities.
It has a simple environment and it can be used, from web developers, penetration testers or even security researchers to test web applications with the view to find bugs, errors or vulnerabilities related to command injection attacks.
By using this tool, it is very easy to find and exploit a command injection vulnerability in a certain vulnerable parameter or string.