Merge pull request #382 from AikidoSec/extend-shell-commands

Extend shell command list
AikidoSec · Sep 20, 2024 · 1bb57fd · 1bb57fd
2 parents fda3f98 + f3c7e9e
commit 1bb57fd
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/library/vulnerabilities/shell-injection/containsShellSyntax.ts b/library/vulnerabilities/shell-injection/containsShellSyntax.ts
@@ -83,6 +83,13 @@ const commands = [
   "set",
   "lsattr",
   "killall5",
+  "dmesg",
+  "history",
+  "free",
+  "uptime",
+  "finger",
+  "top",
+  "shopt",
 
   // Colon is a null command
   // it might occur in URLs that are passed as arguments to a binary