TST 252 - Testing for OS Command Injection (CWE-78)

Course Overview

In this course, you will learn how to identify and mitigate CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection).

Topics include:

• Impact of improper neutralization of special elements
• Techniques for finding OS command injection issues through code review and testing
• Secure coding best practices to prevent OS command injection attacks
• Technology-and platform-specific weaknesses