I have found the shellshock vulnerability on a server its HTTP using the CGI method
Created a backdoor payload with fatrat as its a .sh file as its a bash vulnerability.
Created a listener as well for it on the corresponding port
Tried to send the backdoor using the curl to the server
First problem is that I do not have permission to browser the sites CGI files so that does not work, they are backend but picked up as vulnerable by Nikto
If i try and browse to them though i get a 404 response.
Secondly i am pretty sure the packet will get dropped anyway i hp3ing 100 packets to the server and only one got through the firewall
Created a backdoor payload with fatrat as its a .sh file as its a bash vulnerability.
Created a listener as well for it on the corresponding port
Tried to send the backdoor using the curl to the server
First problem is that I do not have permission to browser the sites CGI files so that does not work, they are backend but picked up as vulnerable by Nikto
If i try and browse to them though i get a 404 response.
Secondly i am pretty sure the packet will get dropped anyway i hp3ing 100 packets to the server and only one got through the firewall