Solving CVE-2014-6271/Shellshock

This exercise covers the exploitation of a Bash vulnerability through a CGI.

FREE

content

Easy difficulty

Less than an hour

average

completion

time

7166

completed

this exercise

Common Mistakes:

Make sure you replace the full netcat command with the score command followed by your UUID: /usr/local/bin/score ....

Online access to this exercise is only available with PentesterLab PRO

Learn more about PentesterLab PRO