Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
bash-shellshock — DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169) | Kitploit
Tools/GitHubGitHub/chef-boneyard/bash-shellshock
Vulnerability AnalysisConfiguration AuditingCloud SecurityDevSecOpsMisconfigurationArchived
GitHubchef-boneyard/bash-shellshock

bash-shellshock

DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)

View Repository
5199 years agoNot yet reviewed
Website

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

bash-shellshock Cookbook

Build Status Cookbook Version

This cookbook is designed to test and optionally remediate the bash "shellshock" bug, more formally known as cve-2014-7169.

Once Chef-client has executed this recipe on one or more hosts, a list of all nodes that are vulnerable to the "Shellshock" exploit can be retrieved from the Chef server via knife search:

knife search node 'bash:shellshock_vulnerable'

Limitations

This cookbook relies on the OS-native packaging system to provide patched versions of the bash package.

Requirements

Platforms

  • Tested on CentOS 6.5
  • Tested on Ubuntu 12.04
  • Should work on a wide variety of other systems

Chef

  • Chef 11+

Cookbooks

  • ohai (https://supermarket.chef.io/cookbooks/ohai)

Attributes

  • No user-configurable attributes

Recipes

bash-shellshock::default

  • Audits and remediates Bash-CVE-2014-7169 ("Shellshock")

bash-shellshock::audit

  • Installs an OHAI plugin that will automatically audit nodes for the Shellshock vulnerability. This plugin creates two new values in OHAI:

    node['languages']['bash']['version'], a string. Returned from bash --version. node['languages']['bash']['shellshock_vulnerable'], a boolean. True if node is vulnerable.

bash-shellshock::remediate

  • If the node is marked vulnerable by the audit recipe, this recipe will attempt to upgrade bash via the native packaging system. Includes the audit recipe.
  • Audits and remediates Bash-CVE-2014-7169 ("Shellshock")

License & Authors

Author: Cookbook Engineering Team ([email protected])

Copyright: 20014-2015, Chef Software, Inc.

root@kitploit:~
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Download Tool