CVE-2014-6271
Using google to scan sites for "ShellShock" (CVE-2014-6271)
ShellShock interactive-shell exploit
Shellshock exploit (CVE-2014-6271)
A docker container vulnerable to Shellshock - CVE-2014-6271
Go-based exploit for CVE-2014-6271 (Shellshock) that sends crafted HTTP requests to execute arbitrary commands on vulnerable servers.
Shellshock exploit aka CVE-2014-6271
Checks if a website is vulnerable to the Shellshock (CVE-2014-6271) Bash vulnerability by sending crafted requests and reporting the result.
Shellshock
Docker container providing a vulnerable environment for CVE-2014-6271 (Shellshock) to practice exploitation and vulnerability analysis in a controlled lab setup.
Professional bug bounty report detailing the exploitation of a Blind SSRF vulnerability leading to Shellshock (CVE-2014-6271) remote code execution, confirmed via out-of-band DNS callback.
Docker-based lab environment for exploiting Shellshock (CVE-2014-6271) via CGI scripts, demonstrating remote command injection through crafted HTTP headers.
Curated collection of verified patches for the Shellshock (CVE-2014-6271) bash vulnerability, with upstream, Debian, and custom patches plus SHA256 integrity checks.
A complete, modern demonstration lab for CVE-2014-6271 (Shellshock), including architecture, exploitation steps, Burp Suite usage, reverse shells, countermeasures, and full command cheat-sheet.
Pentesting caja negra: Shellshock (CVE-2014-6271) + Log4Shell (CVE-2021-44228). Escalada a root. Informe ejecutivo y técnico
[CVE-2014-6271] Apache Shellshock Remote Command Injection tool for quick reverse shell and file browsing
A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server
Simple script to check for CVE-2014-6271
A simple python shell-like exploit for the Shellschok CVE-2014-6271 bug.
Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock
Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271
Python exploit for CVE-2014-6271 (Shellshock) that injects malicious HTTP headers into CGI scripts to execute arbitrary commands via Bash environment variable injection.
CVE-2014-6271 Exploit | by infrar3d
Debian Lenny Bash packages with cve-2014-6271 patches (i386 and amd64)
Exploitation of "Shellshock" Vulnerability. Remote code execution in Apache with mod_cgi
Educational repository detailing the Shellshock (CVE-2014-6271) vulnerability, including technical analysis, attack vectors, proof-of-concept exploitation, and mitigation steps for Bash environment variable injection.
Python exploit for CVE-2014-6271 (Shellshock) targeting vulnerable CGI scripts with reverse shell handler, supporting HTTP/HTTPS, custom paths, and proxy.
Shell script to detect and automatically patch the Bash Shellshock vulnerability (CVE-2014-6271) on macOS systems.
This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).
Shellshock Vulnerability Scanner
Python exploit for CVE-2014-6271 (ShellShock) enabling remote code execution via crafted environment variables in GNU Bash, targeting web servers and SSH.
Recreating Shellshock (CVE-2014-6271) - the bash vulnerability that endangered millions of servers. Automated exploitation toolkit + Burp Suite methodology + Docker lab. Built for security research & education. Offensive security portfolio project.
Collection of Proof of Concepts and Potential Targets for #ShellShocker
Python-based remote code execution exploit for CVE-2014-6271 (ShellShock) targeting IPFire <=2.15. Automated exploitation with configurable switches for ethical penetration testing.
Shellshock exploit + vulnerable environment
A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug).
A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug)
Projet de présentation d'une CVE (ShellShock) avec pdf, démonstration technique et reproductible
CVE-2014-6271 RCE tool
Educational lab demonstrating Shellshock (CVE-2014-6271) exploitation using Metasploit against Metasploitable 2, including scanning, exploitation, reverse shell, and mitigation strategies.
Python-based scanner to detect CVE-2014-6271 (Shellshock) vulnerability in CGI-enabled servers, using Google search to discover potential targets.
CVE-2014-6271 (ShellShock) RCE PoC tool
Shellshock (CVE-2014-6271) exploit script for remote command execution against vulnerable CGI endpoints via HTTP headers.
Exploit code for CVE-2019-14287 and CVE-2014-6271, targeting sudo privilege escalation and Shellshock vulnerabilities.
Ansible playbook to test remote servers for CVE-2014-6271 (Shellshock) bash vulnerability, enabling automated scanning and verification across multiple hosts.
Miscellaneous exploit code
Automation script to exploit the Shellshock vulnerability.
Shellshock POC | CVE-2014-6271 | cgi-bin reverse shell
Shellshock exploitation script that is able to upload and RCE using any vector due to its versatility.
Python exploit for CVE-2014-6271 (Shellshock) that targets a vulnerable CGI endpoint via HTTP and executes arbitrary system commands.
XSHOCK Shellshock Exploit
shellshock CVE-2014-6271 CGI Exploit, Use like Openssh via CGI
Researched and executed real-world CVE exploits in a controlled sandbox: CVE-2000-0168 DoS on Windows 95, ARP Spoofing with NTLMv2 credential interception on Windows XP, and Shellshock RCE via Burp Suite. All activities performed legally for educational purposes.
This is a Python Application that helps you detect if your machine that run bash is vulnerable by CVE-2014-6271
Exploit for CVE-2014-6271 (Shellshock) targeting Bash environment variable injection to achieve remote code execution on vulnerable systems.
Written fro CVE-2014-6271
Exploit for CVE-2014-6271 (Shellshock) targeting vulnerable Bash environments, enabling remote code execution via crafted HTTP requests.
Exploit for CVE-2014-6271 (Shellshock) enabling remote code execution via crafted HTTP headers against vulnerable Bash versions.
[Python/Shell] - Tested in HackTheBox - Shocker (Easy) CVE-2014-6271
Hands-on lab demonstrating the Shellshock (CVE-2014-6271) Bash vulnerability with privilege escalation via environment variable injection, based on the pwnable.kr challenge.
Python-based exploit for CVE-2014-6271 (Shellshock) targeting vulnerable CGI environments to achieve remote code execution.
CS4238 Computer Security Practices
This contains the Dockerfile for building and reproduing shellshock
Docker-based lab to exploit Shellshock (CVE-2014-6271) via a vulnerable CGI endpoint, demonstrating remote command execution in a containerized environment.
This is an individual assignment for secure network programming
This is my implementation of shellshock exploit
CVE-2014-6271 Remote Interactive Shell - PoC Exploit
Exploit code for CVE-2014-6271 (Shellshock) targeting vulnerable Bash environments.
*CVE-2014-6271* Unix Arbitrary Code Execution Exploit commonly know as Shell Shock. Examples, Docs, Incident Response and Vulnerability/Risk Assessment, and Additional Resources may be dumped here. Enjoy :) --- somhmxxghoul ---
scripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271
Prueba de concepto para abusar de la vulnerabilidad Shellshock (CVE-2014-6271).
Shellshock vulnerability attacker
scaner for cve-2014-6271
cve-2014-6271
Stephane Chazelas · linux · Sep 25, 2014
Prakhar Prasad & Subho Halder · linux · Sep 25, 2014
Shaun Colley · cgi · Sep 25, 2014
Claudio Viviani · cgi · Oct 1, 2014
@0x00string · linux · Oct 2, 2014
Metasploit · linux · Oct 2, 2014
hobbily plunt · linux · Oct 4, 2014
Fady Mohammed Osman · cgi · Oct 6, 2014
Phil Blank · linux · Oct 6, 2014
Federico Galatolo · linux · Oct 6, 2014
Metasploit · linux · Oct 29, 2014
Ryan King (Starfall) · php · Nov 3, 2014
Patrick Pellegrino · hardware · Mar 26, 2015
Patrick Pellegrino · hardware · Mar 26, 2015
Roberto Suggi Liverani · multiple · Apr 2, 2015
Bernhard Mueller · multiple · Aug 18, 2015
Metasploit · cgi · Dec 2, 2015
Metasploit · cgi · Jun 10, 2016
Hacker Fantastic · hardware · Oct 21, 2016
Hacker Fantastic · linux · Dec 18, 2016
Metasploit · linux · Oct 2, 2017
