Apache serving CGI scripts run by Bash 4.3, vulnerable to Shellshock (CVE-2014-6271): a function definition in an environment variable, such as a request header passed to CGI, runs the commands that follow it.
Pas commencéDockercommit 1fad5e3x86_64 · aarch64Secret
Exploit CVE-2014-6271 (Shellshock) to run a command on the server.
Le brief de ce lab se trouve dans son dépôt.