monkey/docs/content/reference/exploiters/shellshock.md

---
title: "ShellShock"
date: 2020-07-14T08:41:32+03:00
draft: false
tags: ["exploit", "linux"]
---
### Description

This exploit, CVE-2014-6271, is based on the [logic in NCC group's GitHub](https://github.com/nccgroup/shocker/blob/master/shocker.py).

> In GNU Bash (through 4.3), processes trailing strings after function definitions in the values of environment variables allow remote attackers to execute arbitrary code via a crafted environment. This is demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients and other situations in which setting the environment occurs across a privilege boundary from Bash execution, AKA "ShellShock."
Migrated and updated docs from our wiki to the new docs site Added tags to pages 2020-07-14 15:42:35 +08:00			`---`
			`title: "ShellShock"`
			`date: 2020-07-14T08:41:32+03:00`
			`draft: false`
			`tags: ["exploit", "linux"]`
			`---`
docs: Update shellshock.md 2021-02-26 23:31:44 +08:00			`### Description`
Migrated and updated docs from our wiki to the new docs site Added tags to pages 2020-07-14 15:42:35 +08:00
docs: Update shellshock.md 2021-02-26 23:31:44 +08:00			`This exploit, CVE-2014-6271, is based on the [logic in NCC group's GitHub](https://github.com/nccgroup/shocker/blob/master/shocker.py).`
Migrated and updated docs from our wiki to the new docs site Added tags to pages 2020-07-14 15:42:35 +08:00
docs: Update shellshock.md 2021-02-26 23:31:44 +08:00			> In GNU Bash (through 4.3), processes trailing strings after function definitions in the values of environment variables allow remote attackers to execute arbitrary code via a crafted environment. This is demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients and other situations in which setting the environment occurs across a privilege boundary from Bash execution, AKA "ShellShock."