Shellshock mod_cgi Exploit Analysis
So, we want to exploit the shellshock bash bug.
First, we have to setup our lab.
We're gonna need the right versions of bash and, depending on how we want to exploit the bug, the proper version of whatever other software we might need.
Let's start by finding the CVE. We'll google "shellshock", go to the Wikipedia page, and we find that the second paragraph links to the CVE. Read more