Shell Shock!

September 26, 2014

One of the best ways to exploit “Shellshock” is via a CGI script executing Bash. Not many people write CGI scripts in Bash, but I do, and I published one in a book, too. So I’ve written about it: http://steve-parker.org/articles/shellshock/