Shellshock Attack experiment

1. What is Shellshock attack

2. The specific process of the experiment

Download specific download process has been completed do not explain the process of decompression

(Fig. 1)

The specific process of linking is as follows

(Figure II)

If the output is vulnerable, bash is vulnerable. Finally, let/bin/sh point to/bin/bash.

three . experimental content 1. Attack Set-uid Program

In this experiment, we gain root privileges by attacking the Set-uid program. First, make sure that you have installed a version of Bash with the vulnerability and have/bin/sh point to/bin/bash.

Because of the bug in the vim and touch of this machine, we continued the experiment with the experimental building.

Jixu

Continue the experiment and meet the problem similar to the problem of the virtual machine itself

Shellshock Attack experiment