Skip to content

Glossary: Application and Credential Attacks, and AI Risks

command injection

Also written: OS command injection

Injection where the input reaches an operating system command. On a tracking page that runs ping, typing "192.0.2.1; cat /etc/passwd" makes the ";" start a second command.

Where the book teaches it

Related terms

injectionpingshellinput validation