Command Injection Courses and Certifications

Mastering Command Injection - The Ultimate Hands-On Course

209 ratings at Udemy

How to Find, Exploit and Defend Against Command Injection Vulnerabilities. For Ethical Hackers, Developers & Pentesters

• Udemy
• 2 hours 9 minutes
• On-Demand
• Paid Course

Cyber Mentor

Getting Started with Command Injection

Learn to exploit Command Injection vulnerabilities with a comprehensive guide covering theory, code review, and hands-on labs to enhance your cybersecurity skills and understanding of this dangerous vulnerability.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Cyber Mentor

Learn to Hack Live - Command Injection

Explore command injection vulnerabilities in web applications through live hacking demonstrations and hands-on exercises. Enhance your penetration testing and application security skills.

• YouTube
• 2 hours 5 minutes
• On-Demand
• Free Video

John Hammond

Command Injection Security in Docker Layers - Capture the Flag Tutorial

Dive into command injection vulnerabilities through a hands-on CTF challenge exploring Docker layers and container security, with practical exploitation techniques and defensive strategies.

• YouTube
• 43 minutes
• On-Demand
• Free Video

BSidesLV

Security Pitfalls with Exec Commands in Software Integrations - A Quick Story

Explore security risks in software integrations, focusing on command injection attacks. Learn detection methods, prevention techniques, and real-world vulnerability analysis through a case study.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Black Hat

Commix - Detecting and Exploiting Command Injection Flaws

Automated tool for detecting and exploiting command injection vulnerabilities in web applications. Covers various exploitation scenarios and reveals 0-day vulnerabilities across different platforms.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Black Hat

Command Injection in F5 iRules

Explore command injection vulnerabilities in F5 iRules, focusing on syntax, exploitation techniques, and security implications for BigIP F5 products used in high-performance web traffic routing.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

CryptoCat

Cookie Forgery and Command Injection Walkthrough - Feature Unlocked Challenge - CSCTF 2024

Dive into web security exploitation through cookie forgery, signature bypass, and blind command injection techniques in a detailed CTF challenge walkthrough.

• YouTube
• 11 minutes
• On-Demand
• Free Video

Cyber Mentor

Anyone Can Find This IoT Vulnerability - Command Injection Tutorial

Discover how to find command injection vulnerabilities in IoT devices through firmware analysis, reverse engineering with Ghidra, and practical exploitation techniques.

• YouTube
• 39 minutes
• On-Demand
• Free Video

DEFCONConference

Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions

Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Journey to Command Injection - Hacking the Lenovo ix4-300d

Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

SecurityFWD

Cloud Hacking Basics - BurpSuite for OS Command Injection

Master BurpSuite fundamentals and OS command injection techniques through hands-on lab exercises, focusing on identifying and exploiting vulnerabilities in cloud-based applications.

• YouTube
• 11 minutes
• On-Demand
• Free Video

A03: Injection

Master injection vulnerabilities through hands-on SQL, XSS, and command injection exploits, then implement parameterization and validation defenses in a pastebin application.

• CodeSignal
• 2 hours
• On-Demand
• Free Certificate

A03: Injection

Discover how to identify and prevent injection vulnerabilities including SQL, XSS, and command injection through hands-on attacks and defense techniques in a pastebin application.

• CodeSignal
• 2 hours
• On-Demand
• Free Certificate

A03: Injection

Master injection vulnerability prevention through SQL, XSS, and command injection mitigation techniques using parameterized queries, sanitization, and secure coding patterns.

• CodeSignal
• 2 hours
• On-Demand
• Free Certificate