commix
Automated All-in-One OS Command Injection and Exploitation Tool
Matches ATT&CK tactic: Initial Access ↗
Toolinitial-accessredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
This package contains Commix (short for [comm]and [i]njection e[x]ploiter). It has a simple environment and it can be used, from web developers, penetration testers or even security researchers to test web applications with the view to find bugs, errors or vulnerabilities related to command injection attacks. By using this tool, it is very easy to find and exploit a command injection vulnerability in a certain vulnerable parameter or string. Commix is written in Python programming language.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install commix`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
