Batch file command injection

[WallShadow]

I recently learned to use command injection with batch files and was wondering, what do you guys think of it? I understand that it is as basic as code injection gets and is almost inapplicable in real world situations, but have any of you ever gotten to use it in a real professional setting? And also, what are, if any, your sources of information on it?

[tremor77]

I use batch files (along with vbscript as well, often together) all the time in management of a mid-sized AD / Exchange Network with about 30 users and computers. The real world application of all sorts of batch programming comes in handy to perform many startup and repetitive tasks. Give the right application in a 'hacking' scenario... I've also found batch files to be extremely useful... it seems like as we've progressed in technology, news software and more importantly newer admins, seem to forget about the 'old school' stuff. You'd be surprised about what 'ancient' DOS based commands administrators are leaving unprotected on their networks.