4 ms·
Has anyone constructed this exploit as a simple `wget` command?
by earlz 12y ago
Has anyone constructed this exploit as a simple `wget` command?
- fiedzia 12y agowget --header='Referer: () { :;}; touch /tmp/vulnerable ' www.example.com
- bodyfour 12y agoNote that you'll typically want to supply the URL to a CGI script on the site, not just www.example.com. Don't think you're unaffected just because the top-level page of your site doesn't appear vulnerable.
- earlz 12y agoIs there some easy way of detecting a site you don't control is vulnerable without bringing it down?
- nkurz 12y agoYes, you can ask it to ping an address you control and record where the pings come from.