ABASH: finding bugs in bash scripts
The essence of command injection attacks in web applications