↪️ Merge pull request #200 from wchresta/180_add_shell_injection_sinks

Add fully qualified shell injection sinks.

Author: KevinHock

Diff for: pyt/vulnerability_definitions/all_trigger_words.pyt

@@ -30,18 +30,49 @@
                 "'..' in"
             ]
         },
+        "commands.getoutput(": {},
+        "commands.getstatusoutput(": {},
         "execute(": {},
-        "os.system(": {},
         "filter(": {},
-        "subprocess.call(": {},
-        "subprocess.Popen(": {},
-        "render_template(": {},
-        "set_cookie(": {},
-        "redirect(": {},
-        "url_for(": {},
         "flash(": {},
         "jsonify(": {},
+        "os.execl(": {},
+        "os.execle(": {},
+        "os.execlp(": {},
+        "os.execlpe(": {},
+        "os.execv(": {},
+        "os.execve(": {},
+        "os.execvp(": {},
+        "os.execvpe(": {},
+        "os.popen(": {},
+        "os.popen2(": {},
+        "os.popen3(": {},
+        "os.popen4(": {},
+        "os.spawnl(": {},
+        "os.spawnle(": {},
+        "os.spawnlp(": {},
+        "os.spawnlpe(": {},
+        "os.spawnv(": {},
+        "os.spawnve(": {},
+        "os.spawnvp(": {},
+        "os.spawnvpe(": {},
+        "os.startfile(": {},
+        "os.system(": {},
+        "popen2.Popen3(": {},
+        "popen2.Popen4(": {},
+        "popen2.popen2(": {},
+        "popen2.popen3(": {},
+        "popen2.popen4(": {},
+        "redirect(": {},
         "render(": {},
-        "render_to_response(": {}
+        "render_template(": {},
+        "render_to_response(": {},
+        "set_cookie(": {},
+        "subprocess.Popen(": {},
+        "subprocess.call(": {},
+        "subprocess.check_call(": {},
+        "subprocess.check_output(": {},
+        "subprocess.run(": {},
+        "url_for(": {}
     }
 }