XSHOCK

⚡ xShock ShellShock ⚡ Written by TMRSWRR Version 1.0.0 xShock ShellShock CVE-2014-6271 This tool exploits shellshock. Instagram: TMRSWRR 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 📒 Read Me 📒 All founded directories will be saved in vulnurl.txt file. The results of the executed commands...

CVE-2014-6271

CVE-2014-6271...

shellshock

shellshock Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock CVE-2014-6271 & CVE-2014-7169 vulnerabilities in Bash environments. Installation: Clone the repository: git clone https://github.com/ajansha/shellshock.git Navigate to the directory...

Shellshock-CVE-2014-6271

This repository does not have a README...

bash-up

bash-up a auto script to fix CVE-2014-6271 bash vulnerability...

it355-lab4-enterprise-lan-security

IT355 Lab 4: Enterprise LAN Security & Shellshock Analysis 📌 Project Overview This repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification, exploitation, and remediation of the Shellshock CVE-2014-6271...

CVE-2014-6271

CVE-2014-6271 An automated way to fix bash Testing for the Vulnerability You can determine if you are vulnerable by executing this test: env x=' :;; echo vulnerable' bash -c 'echo hello' Fixing Vulnerability Run this on the command line. You may be prompted to enter your password. bash curl -s...

Shellshock_vuln_Exploit

🚨 Shellshock RCE Exploit CVE-2014-6271 This is a Python exploit for the Shellshock vulnerability CVE-2014-6271, which affects GNU Bash. The exploit targets CGI scripts on vulnerable web servers and establishes a reverse shell to the attacker's machine. CVE ID CVE-2014-6271 Disclaimer This tool is...

puppet-shellshock

This module determine the vulnerability of a bash binary to the shellshock exploits CVE-2014-6271 or CVE-2014-7169 and then patch that where possible. Supported platforms: Debian 5, 6, 7 Ubuntus 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Usage class 'shellshock': Facter provided facter -p...

cve-2014-6271-huan-lu

cve-2014-6271-huan-lu reading course...

ansible-bashpocalypse

Patch for CVE-2014-6271 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Usage install ansible on your local host. add the servers you wish to patch to inventory. run ansible-playbook ./deploy.yml -i inventory...

pentesting-obioba

pentesting-obioba Black box pentesting: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Root escalation. Executive and technical report Pentesting Obioba — Security Audit Black Box Project of the 360° Cybersecurity Bootcamp by The Bridge Digital Talent Accelerator 2025-2026. 🎯 Objective...

cve-2014-6271-mengjia-kong

This repository does not have a README...

Shellshock-CVE-2014-6271-Exploitation-and-Analysis

🐚 Shellshock CVE-2014-6271 – Exploitation & Analysis 📌 Overview This is the practical assignment for Vulnerability Assessment and Penetration Testing – II , focusing on the exploitation and analysis of the Shellshock vulnerability CVE-2014-6271. Conducted in a controlled lab environment using...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connection...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

shellshock-poc-cve-2014-7169

CVE-2014-6271 - Shellshock PoC Summary CVSS 10.0. Bash improperly parses trailing commands after a function definition stored in an environment variable, executing them during shell initialization. Root cause Bash environment variables can encode function definitions: x=' :; ' When bash imports...

CVE-2014-6271_Test

CVE-2014-6271Test CVE-2014-6271Test Obviously, this project is used to check if a server with cgi enabled is affected with CVE-2014-6271aka shellshock. Dependency Need GoogleSearchCrawler. Usage eg: python exp.py -g www.google.com This will test urls collected from google search result with keywo...

CVE-2014-6271

EXPLOIT FOR CVE-2014-6271 USAGE : CVE-2014-6271.py full path to target uri command...

Rainstorm

================================================================================================ BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License :...