Basic
- append our command to the required input to see if there is a change in the output.
Command Injection Methods
Injecting
- check for front end validation
- bypass it using burp suite
- eg:
127.0.0.1; whoami
Other operators
- AND:
&&- this will execute both the commands.- dont forget to encode while sending the request
- OR:
||this will see if either 1 command is executed- if the first command is executed, it wont execute the second command.
- Newline:
%0d%0a- useEnteron keyboard in Burp 

