All About Bash Bug - CVE-2014-6271

'    ██████  ██░ ██ ▓█████  ██▓     ██▓      ██████  ██░ ██  ▒█████   ▄████▄   ██ ▄█▀
'  ▒██    ▒ ▓██░ ██▒▓█   ▀ ▓██▒    ▓██▒    ▒██    ▒ ▓██░ ██▒▒██▒  ██▒▒██▀ ▀█   ██▄█▒
'  ░ ▓██▄   ▒██▀▀██░▒███   ▒██░    ▒██░    ░ ▓██▄   ▒██▀▀██░▒██░  ██▒▒▓█    ▄ ▓███▄░
'    ▒   ██▒░▓█ ░██ ▒▓█  ▄ ▒██░    ▒██░      ▒   ██▒░▓█ ░██ ▒██   ██░▒▓▓▄ ▄██▒▓██ █▄
'  ▒██████▒▒░▓█▒░██▓░▒████▒░██████▒░██████▒▒██████▒▒░▓█▒░██▓░ ████▓▒░▒ ▓███▀ ░▒██▒ █▄
'  ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓  ░░ ▒░▓  ░▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░ ▒░▒░▒░ ░ ░▒ ▒  ░▒ ▒▒ ▓▒
'  ░ ░▒  ░ ░ ▒ ░▒░ ░ ░ ░  ░░ ░ ▒  ░░ ░ ▒  ░░ ░▒  ░ ░ ▒ ░▒░ ░  ░ ▒ ▒░   ░  ▒   ░ ░▒ ▒░
'  ░  ░  ░   ░  ░░ ░   ░     ░ ░     ░ ░   ░  ░  ░   ░  ░░ ░░ ░ ░ ▒  ░        ░ ░░ ░
'        ░   ░  ░  ░   ░  ░    ░  ░    ░  ░      ░   ░  ░  ░    ░ ░  ░ ░      ░  ░
'                                                                    ░
' *********************** All About Bash Bug - CVE-2014-6271 ************************


'  ╔═╗ ┬ ┬┬┌─┐┬┌─  ╔═╗┬ ┬┌─┐┌─┐┬┌─
'  ║═╬╗│ │││  ├┴┐  ║  ├─┤├┤ │  ├┴┐
'  ╚═╝╚└─┘┴└─┘┴ ┴  ╚═╝┴ ┴└─┘└─┘┴ ┴
'  See if you still vulnerable or not.


Usage: Via bash terminal just type the following command.
Command: $ env x='() { :;}; echo Your system is vulnerable update ASAP' bash -c "echo Visit svieg.wordpress.com"

Usage: Get the URL that need to be tested (Remember don't put any critical URL in services provided by others)
URL: http://shellshock.brandonpotter.com/


'  ╔═╗┌┬┐┌┬┐┌─┐┌─┐┬┌─
'  ╠═╣ │  │ ├─┤│  ├┴┐
'  ╩ ╩ ┴  ┴ ┴ ┴└─┘┴ ┴
'  Some attack techniques in the wild.


URL: https://gist.github.com/anonymous/929d622f3b36b00c0be1
Description: Malware in the Wild.

URL: http://pastebin.com/166f8Rjx
Description: Python PoC.

URL: http://www.exploit-db.com/exploits/34766/
Description: PHP PoC

URL: https://github.com/rapid7/metasploit-framework/pull/3882
Description: root on OSX+VMWare.


'  ╔═╗┌┬┐┬ ┬┌─┐┬─┐┌─┐
'  ║ ║ │ ├─┤├┤ ├┬┘└─┐
'  ╚═╝ ┴ ┴ ┴└─┘┴└─└─┘
'  Random Stuff


Description: Sample C code.
URL: http://pastebin.com/kQ5ppEZD

Description: GitHub Dork.
Search: #!/bin/bash extension:cgi

Description: Google Dork.
Search: filetype:sh inurl:cgi-bin


'  ╔═╗┌─┐┌┬┐┌─┐┬ ┬
'  ╠═╝├─┤ │ │  ├─┤
'  ╩  ┴ ┴ ┴ └─┘┴ ┴
'  Get it fix ASAP.


URL: http://www.circl.lu/pub/tr-27/
Description: The Computer Incident Response Center Luxembourg (CIRCL) Helper.


'  ╦═╗┌─┐┌─┐┌─┐┬─┐┌─┐┌┐┌┌─┐┌─┐┌─┐
'  ╠╦╝├┤ ├┤ ├┤ ├┬┘├┤ ││││  ├┤ └─┐
'  ╩╚═└─┘└  └─┘┴└─└─┘┘└┘└─┘└─┘└─┘
'  Useful links to grab valid information.


URL: http://garage4hackers.com/entry.php?b=3087
Description: Everything you need to know about CVE-2014-6271.

URL: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271
Description: Bash-ing Into Your Network – Investigating CVE-2014-6271.

URL: http://lcamtuf.blogspot.pt/2014/09/quick-notes-about-bash-bug-its-impact.html
Description: Quick notes about the bash bug, its impact, and the fixes so far.

URL: https://access.redhat.com/security/cve/CVE-2014-6271
Description: RedHat CVE information.


'  ╔═╗┬─┐┌─┐┌┬┐┬┌┬┐┌─┐
'  ║  ├┬┘├┤  │││ │ └─┐
'  ╚═╝┴└─└─┘─┴┘┴ ┴ └─┘


All Internet Scene and Security Experts
Information Compilation by SiMpS0N 25-09-2014