shellshock-victim-host

A docker container vulnerable to Shellshock - CVE-2014-6271

Run

podman build -t shellshock-victim .
podman run -it -p 80:8080 shellshock-victim

Note: Builds with docker as well.

The vulnerable app will be deployed on :

• http://localhost:8080/victim.cgi - Vulnerable endpoint
• http://localhost:8080/safe.cgi - Safe endpoint