PortSwigger Web Security Academy: blind OS command injection detected with a time delay, injecting ping into the feedback email parameter.
Blind OS Command Injection with Time Delays
Posts for: #Injection
OS Command Injection: Simple Case
PortSwigger Web Security Academy: OS command injection (simple case). Injecting whoami into an unsanitized stock-checker storeID parameter with Burp.