Unverified50% confidenceFactExact time
Command injection is a vulnerability in which an attacker embeds shell metacharacters (such as ;, &&, |, $()) in input data, causing the string to be interpreted by the shell parser as additional commands to execute.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
Verified提示词注入（Prompt Injection）分为直接注入和间接注入两类，直接注入通过用户输入植入恶意指令，间接注入将恶意指令藏匿于AI可能读取的外部内容中57% similarUnverified攻击链利用初始化脚本查询DNS的TXT记录，将恶意shell命令藏在TXT字段中，脚本执行DNS查询时返回的文本被直接传入执行函数完成注入56% similarUnverifiedDSH provides Slash Commands, where users trigger predefined Agent behaviors by entering a "/" prefix followed by a command.56% similarUnverifiedexplainshell.com 能将复杂的 Shell 命令拆解为人类可读的逐项解释55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/999583API
curl https://kongchang.com/api/v1/knowledge/claims/999583MCP
get_claim(id=999583)