n">Command Injection</a></h1>
<p>Many web applications often interact with the underlying OS directly in order to access and provide various services. If user input is passed unsanitised to these APIs, it can result in <em>command injection</em>, whereby an adversary can inject commands to be executed by the OS on the server.</p>
<p>Exploiting a command injection vulnerability is fairly simple. One simply needs to use command chaining operators to insert OS commands into the unsanitised input. The character