INNER CODE UNIT · Python

funcGeneratePayloadForBCheck

volkandindar/agartha · Agartha.py:324

    def funcGeneratePayloadForBCheck(self, ev=None):
        if self.funcGeneratePayload():
            line_count = len([line for line in self._tabDictResultDisplay.getText().split('\n') if line.strip()])
            if self._rbDictCommandInj.isSelected():
                bcheckCode= """metadata:
    language: v2-beta
    name: "Command Injection Fuzzing - Agartha"
    description: "Command Injection is a critical vulnerability that allows attackers to execute arbitrary system commands by exploiting insufficiently validated user input. This can result in full system compromise, data theft, or service disruption."
    author: "Agartha"
    tags: "RCE", "Command Injection"

define:
    issueDetail = `Command Injection on Path {latest.request.url}`
    references = `
    References:
    https://portswigger.net/web-security/os-command-injection
    https://owasp.org/www-community/attacks/Command_Injection
    https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html`

View source record →