5. Commix

Description:
Commix (Command Injection Exploiter) is an open-source penetration testing tool that automates the process of detecting and exploiting command injection vulnerabilities.

Examples:

• 1. Basic Command Injection Scan:
     • commix -u “http://example.com/vuln”

Explanation: Scans the specified URL for command injection vulnerabilities.

• 1. Specify a Custom Data Parameter:
     • commix -u “http://example.com/vuln” –data=”id=1″

Explanation: Tests a specific data parameter (id=1) for command injection vulnerabilities.

• 1. Use Tor as a Proxy:
     • commix -u “http://example.com/vuln” –tor

Explanation: Uses Tor for anonymity when scanning for vulnerabilities.