3 ms·
When the system you're testing replies with a '400 Bad request' (as mine do ;) ), you're probably in "safe" territory, no?
by rasur 12y ago
When the system you're testing replies with a '400 Bad request' (as mine do ;) ), you're probably in "safe" territory, no?
- shellshocker 12y agoI would say so yes. Have you tried the exploit cgi listed on the website to test?
- rasur 12y agoI'll have to set something up that actually uses cgi-bin. However, my load-balancer would still kill the request, I suspect. (EDIT: Sorry.. my point being; your site should probably class 400's as 'safe'?)