gistfile1.txt

coreos_production_vmware_insecure $ ssh [email protected] -i insecure_ssh_key 
CoreOS (stable)
core@localhost ~ $ bash --version
GNU bash, version 4.2.49(1)-release (x86_64-cros-linux-gnu)
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>

This is free software; you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
core@localhost ~ $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
core@localhost ~ $ env X='() { (a)=>\' sh -c "echo date"; cat echo
sh: X: line 1: syntax error near unexpected token `='
sh: X: line 1: `'
sh: error importing function definition for `X'
date
cat: echo: No such file or directory
core@localhost ~ $ cat /etc/os-release 
NAME=CoreOS
ID=coreos
VERSION=410.1.0
VERSION_ID=410.1.0
BUILD_ID=
PRETTY_NAME="CoreOS 410.1.0"
ANSI_COLOR="1;32"
HOME_URL="https://coreos.com/"
BUG_REPORT_URL="https://github.com/coreos/bugs/issues"