Apache serving CGI scripts run by Bash 4.3, vulnerable to Shellshock (CVE-2014-6271): a function definition in an environment variable, such as a request header passed to CGI, runs the commands that follow it.
Not startedDockercommit 1fad5e3x86_64 · aarch64Secret
Exploit CVE-2014-6271 (Shellshock) to run a command on the server.
The brief for this lab lives in its repository.