Input Sanitization & Command Injection Scanner

Probe system shell executions, path traversal '../' sequences, and template expression injections.

Technical Scope & Verification Behavior

Injects null bytes, pipe operators (| & ;), template interpolation payloads (${7*7}), and directory traversal paths across APIs.

Automated Inspection Checks (16)

Passive URL parameter fuzzing

Non-destructive boundary tests

Header & cookie flag assertions

Differential latency timing

Proof of Concept (PoC) Vector

Canonical test payload dispatched during security surface audits.

filename=report;cat /etc/passwd

Probe Execution Simulator

Watch the probe engine test this signature in an isolated sandbox.

probe-runner (isolated ephemeral container)

Click 'Simulate Check' to watch the headless audit engine test this vector.

Remediation Patch

Avoid Shell Executions

patch.diff (typescript)

--- a/handler.typescript (Vulnerable)

exec(`ping -c 1 ${host}`);

+++ b/handler.typescript (Remediated)

execFile('/bin/ping', ['-c', '1', host]);

Use execFile or native APIs with separate argument arrays instead of invoking an arbitrary shell parser.

AI Agent Prompt (Cursor · Claude · Copilot)

Copy and paste into your editor to refactor this issue automatically.

"Replace child_process.exec with execFile or native library calls, passing user inputs as discrete non-parsed arguments."

Run Isolated Check

Test your public domain specifically for Input Sanitization & Command Injection Scanner.

100% passive • No server load

Specification Details

CVSS Score: 9.6 / 10.0
Severity Level: CRITICAL
Category: VULNERABILITY
Test Vectors: 16 automated
Execution SLA: < 2.5 seconds
False Positive Defense: Strict assertion

Related Standards

#RCE#Command Injection#Sanitization

Frequently Audited Together

Checks commonly evaluated alongside Input Sanitization & Command Injection Scanner during surface discovery.

View all 41 checks →

VULNERABILITY

SQL Injection Scanner

Detect SQL injection vulnerabilities in your web application before attackers exploit database access.

CVSS 9.8

VULNERABILITY

Cross-Site Scripting (XSS) Scanner

Find XSS vulnerabilities that could let attackers inject malicious scripts and steal customer sessions.

CVSS 8.2

VULNERABILITY

API Key Exposure Scanner

Detect exposed API keys, private tokens, and cloud secrets in client-side bundles and public responses.

CVSS 9.4

Run continuous monitoring for Input Sanitization & Command Injection Scanner

Audit your site across all 41 vectors automatically on every deploy.

Back to Catalog