shellshocker-android

shellshocker-android This is an Android Application that helps you detect if your machine that run bash is vulnerable by CVE-2014-6271 Stefano Belli, C Copyleft, share, rebuild, modify, redistribuite as you think it should be better Google+: http://plus.google.com/+StefanoBelli WebSite:...

CVE-2014-6271

Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability CVE-2014-6271. Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell. The vulnerability allows...

Cgi-bin_bash_Reverse

Cgi-binbashReverse POC for CVE-2014-6271 Src:https://gist.github.com/matjohn2/bc9689c60d4c9c5a2538...

CVE-2014-6271

CVE-2014-6271 A vulnerability known as "ShellShock" exists in GNU Bash through 4.3 due to how it processes trailing strings in the values of environment variables after function definitions. This vulnerability enables remote attackers to execute arbitrary code by crafting the environment in certa...

Shellshock

Shellshock Exploit CVE-2014-6271 Exploit Description This repository contains an exploit for a vulnerability that affects unix-based systems. Please note that this is merely a proof-of-concept script created for educational purposes and should be used responsibly. This exploit is designed to...

shellshock_crawler

Prerequisite 1. sudo pip install shell 2. install google python search. https://github.com/MarioVilas/google Run I use google to search first 1000 sites and try to get the /etc/passwd After tesing, there are many many many host that can be rooted!!!! By the way, this is only a proto, it has false...

CVE-2014-6271

CVE-2014-6271 Bash Shellshock and Aftershock Tester for Ansible 1. Install Ansible http://docs.ansible.com/introinstallation.html 2. Add servers to inventory file example: username@ip 3. Copy your public key to remote servers' .ssh/authorizedkeys 4. execute test $ ansible-playbook -i inventory...

CVE-2014-6721-exploit-Shellshock

CVE-2014-6721-exploit-Shellshock exploit of the Shellshock vulnerability...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock CVE-2014-6271. Remote...

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...

shellshock-poc

Shellshock-Exploit This exploit abuses the Shellshock vulnerability CVE-2014-6271 existing in bash from version 1.14 to 4.3. Usage: python3 ./exploit.py -t -u -a -p Example: python3 ./exploit.py -t 10.10.10.15 -u /cgi-bin/vulnerable -a 10.10.10.7 -p 4443 More information about the vulnerability:...

CVE-2014-6271

CVE-2014-6271 Shellshock Vulnerability Scanner...

bash-shellshock

This repository does not have a README...

bro-shellshock

ShellShock Detector for Bro This script detects successful exploitation of the Bash vulnerability with CVE-2014-6271 nicknamed "ShellShock". It's more comprehensive than most of the detections around in that it's watching for behavior from the attacked host that might indicate successful compromi...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC tool ======= BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License : GPLv3 Orginal github project :...

CVE-2014-6271

CVE-2014-6271 Description This project allows reproducing the vulnerability CVE-2014-6271 , also known as Shellshock. Shellshock is a security vulnerability in Bash that allows executing malicious code via environment variables. The purpose of this project is to demonstrate the impact of this...

CVE-2014-6271

CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...

Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...

docker_CVE-2014-6271.

dockerCVE-2014-6271. 1. docker build -t DOCKERIMAGENAME /path/to/dockerfiledirectory 2. docker run -it -d -p 8080:80 DOCKERIMAGENAME 3. verify execution with: docker ps 4. verify web server execution: http://localhost:8080 5. exploit vulnerability : curl -H "user-agent: :; ; echo; echo; /bin/bash...

bash-fix-exploit

bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...