External Command Injection plugin link

[7a]

The following tool could be a nice addition to assist pentesters in manual exploitation.
I would suggest to add this as a link to an external command injection plugin:
https://github.com/stasinopoulos/commix

I don't think it would be smart to throw this at a website by default (would slow scans for nothing most of the time, these things are typically best when you find a promising page), although maybe we could have an "aggressive" mode where we do this in a future phase as an active plugin too.

[arunk-s]

@7a, Can you point me to the direction where changes would be required. I think I should start with this one.

[7a]

Take a look at other external plugins, I believe around
plugins/web/external, there is a framework API that you can use to generate
the link, easy :) hugs
On 29 Oct 2015 14:45, "Arun Sori" notifications@github.com wrote:

@7a https://github.com/7a, Can you point me to the direction where
changes would be required. I think I should start with this one.

—
Reply to this email directly or view it on GitHub
#412 (comment).

[flabbergastedbd]

Hey @arunk-s . Have a look at #162

[viyatb]

Closing as fix merged in the develop branch.