632 reputation
11128
bio website coffeeplusplus.z11.de
location Germany
age 42
visits member for 2 years, 2 months
seen 2 days ago

SCHWUPPS-DI-WUPPS


Nov
12
awarded  Famous Question
Nov
9
awarded  Popular Question
Oct
17
awarded  Nice Question
Sep
29
comment Is server exploitable by Shellshock with cgi-enabled only?
shellshock.detectify.com will iterate over a list of possible cgi-URLs until it finds a vulnerable end-point where it will inject a harmless payload.
Sep
29
awarded  Organizer
Sep
29
revised Is server exploitable by Shellshock with cgi-enabled only?
added shellshock context
Sep
29
suggested suggested edit on Is server exploitable by Shellshock with cgi-enabled only?
Sep
29
comment Is server exploitable by Shellshock with cgi-enabled only?
I read that it might also work if the server side scripts (e.g. php) call an external program, bash may get called (e.g. a system command for ImageMagick or for sendmail).
Sep
29
revised Is server exploitable by Shellshock with cgi-enabled only?
added how to disable cgi
Sep
29
comment What is a specific example of how the Shellshock Bash bug could be exploited?
But Is a server exploitable with cgi-enabled only?
Sep
29
suggested suggested edit on Is server exploitable by Shellshock with cgi-enabled only?
Sep
29
comment Is server exploitable by Shellshock with cgi-enabled only?
How would you have to check your server against this list?
Sep
29
comment Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?
related: The correct way to check for vulnerability CVE-2014-7169 (aftershock)
Sep
29
asked The correct way to check for vulnerability CVE-2014-7169 (aftershock)
Sep
29
revised Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?
added 833 characters in body
Sep
28
comment Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?
I was referring to taviso bug by hannob's bashcheck script which might have an error?
Sep
28
revised Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?
edited title
Sep
28
comment Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?
@DeerHunter: This is definitely no duplicate, cause that is the question I read before: that question is about the initial bug CVE-2014-6271 and there is no example about exploiting the remaining bug CVE-2014-7169 after the path is applied
Sep
28
asked Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?
Sep
28
comment Vulnerability test for CVE-2014-7169 (Shellshock)
Maybe a false positive? github.com/hannob/bashcheck/issues/6#issuecomment-57081774