+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: Python (https://sinister.ly/Forum-Python)
+--- Thread: [Release] Seashell - Shellshock large lists of servers (/Thread-Release-Seashell-Shellshock-large-lists-of-servers)
[Release] Seashell - Shellshock large lists of servers - 3SidedSquare - 09-26-2014
I came back to see if there was any rage about shellshock, and was diasappointed to see none. Here's a script to automate. Have fun!
http://fbe.am/unm
RE: [Release] Seashell - Shellshock large lists of servers - Adorapuff - 09-26-2014
Did you make this yourself? I've seen a few automation scripts to find vulnerable servers going around.
RE: [Release] Seashell - Shellshock large lists of servers - Eclipse - 09-26-2014
Great, now loads of skidz will be able to show off their e-peen.
https://www.sinister.ly/Thread-Tutorial-Shellshock-bash-exploit-temporary-patch
RE: [Release] Seashell - Shellshock large lists of servers - Dyme - 09-26-2014
Fuuuuuuk I kinda wish exploitation wasn't as trivial... When skids get shit like this it just ruins everything.
RE: [Release] Seashell - Shellshock large lists of servers - Fury - 09-26-2014
Is this your list? Either way, thanks for this
RE: [Release] Seashell - Shellshock large lists of servers - 3SidedSquare - 09-26-2014
(09-26-2014, 04:54 PM)Adorapuff Wrote: Did you make this yourself? I've seen a few automation scripts to find vulnerable servers going around.
Yep, it's a modified version of the tool here:
(with a small amount of code stolen from www.binarytides.com)
https://www.sinister.ly/Thread-Release-MuchNTP-DOS-with-NTP-amplification
RE: [Release] Seashell - Shellshock large lists of servers - Reiko - 09-27-2014
(09-26-2014, 05:12 PM)Dyme Wrote: Fuuuuuuk I kinda wish exploitation wasn't as trivial... When skids get shit like this it just ruins everything.
Don't worry Dyme. He did it wrong. Look a bit closer, he's sending HTTP over UDP.
RE: [Release] Seashell - Shellshock large lists of servers - 3SidedSquare - 09-27-2014
(09-27-2014, 12:59 AM)Reiko Wrote: Don't worry Dyme. He did it wrong. Look a bit closer, he's sending HTTP over UDP.
Whoops! So I am, I'll get it fixed some time tonight.