'Commix' exploitation tool

[fac51]

OK guys after getting some pretty quick replies to recent problems, it's time to give back to the community.
The 'CommixProject' exploitation tool, checkout some videos on youtube and follow the link to github.
I've tried it and it works really well, think 'Sqlmap' on steroids, it looks like it will work in conjunction with 'Weevely'
as well which is cool. Only one thing it will only run if you are running as root. It comes up with a 'permission denied'
error if you don't.

Have fun

^fac51

[ostendali]

hi,
we already aware of commix and tried multiple times, I have personally tested in multiple occasion and the shell doesn't seem to work even though when it reports that the exploitation went successfully, about using weevely, it doesn't work either as per design while it say the backdoor is placed you can't really access to the shell.
maybe in the version they have fixed but we have tested this a few months ago and it wasn't really convincing.

we will try it again if there is a new version with fixes.

thanks