Some days ago I read about the Shellshock bug and I wanted to test a CUPS server for it and readed some example codes to build this code:
() { test;};echo /"Content-type: text/plain\"; echo; echo; /bin/cat /etc/passwd' "http://anything.xy:631/printers/jobs.cgi?ORDER=asc&QUERY=123&x=0&y=0
I've inserted it to a custom Firefox User Agent String and visited the cgi script.
Now something should happen but it doesn't. Does it mean, it's secure or does it mean that I made a mistake with it?
Do I have to use curl?
Thanks in advance guys :-)