GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • commixproject
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles

This view

  • Original page
  • New address

GeezerVison is showing github.com — Commix Project

README.md

CommixProject

Commix Project turns command injection from theory to proof: detecting it, exploiting it, and understanding it - the tool, a testbed to validate findings against, and the research and documentation tying them together. Development traces back to 2014.

What's here

Repository Role
commix The tool itself - detects and exploits command injection, from first hint to a working shell.
commix-testbed Intentionally vulnerable targets commix is built and tested against.
commix-to-burp Brings commix’s exploitation into Burp Suite.
commixproject.github.io Source behind commixproject.com and its documentation.

Contributing

Contributions, bug reports, feature requests, and documentation improvements are welcome.

Note

Please refer to the contribution guidelines of the relevant repository before submitting changes.

License

Commix Project is distributed under the GNU General Public License v3.0.

Pinned Loading

  1. commix commix Public

    Automated Αll-in-One OS command injection exploitation tool.

    Python 5.9k 937

  2. commix-testbed commix-testbed Public

    A collection of web pages, vulnerable to command injection flaws.

    PHP 189 65

  3. commix-to-burp commix-to-burp Public

    Command injection exploitation, powered by commix - without leaving Burp.

    Java 2

  4. commixproject.github.io commixproject.github.io Public

    Commix Project official website contents.

    JavaScript 2 2

Repositories

Loading
Type
Language
Sort
Showing 5 of 5 repositories
  • commix Public

    Automated Αll-in-One OS command injection exploitation tool.

    commixproject/commix's past year of commit activity
    Python 5,908 937 0 0 Updated Nov 12, 2026
  • commixproject.github.io Public

    Commix Project official website contents.

    commixproject/commixproject.github.io's past year of commit activity
    JavaScript 2 2 0 0 Updated Nov 7, 2026
  • commix-testbed Public

    A collection of web pages, vulnerable to command injection flaws.

    commixproject/commix-testbed's past year of commit activity
    PHP 189 65 0 0 Updated Nov 5, 2026
  • .github Public

    Organization profile for the Commix Project.

    commixproject/.github's past year of commit activity
    0 0 0 0 Updated Oct 17, 2026
  • commix-to-burp Public

    Command injection exploitation, powered by commix - without leaving Burp.

    commixproject/commix-to-burp's past year of commit activity
    Java 2 0 0 0 Updated Oct 15, 2026

People

@stasinopoulos

Top languages

JavaScript Python PHP Java

Most used topics

open-source pentesting
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.