Can anyone let me know the steps to setup a simple Hello World Apache (or other GNU/Linux) website that i can hit over 80 or 443 and exploit any bash CVE vuln; assuming I have a vulnerable bash.
I dont have ssh creds to 100% of the boxes, and the bash (rpm) tests only work with credentialed scans.
I want to hit the URL, scan without any creds and see a positive finding from Nessus. Then patch bash and see that my URL is clean again.
But I need help building a little web site please. Thanks!