[Bro] CVE-2014-6271/ detection script

[Nicholas Weaver]

On Sep 25, 2014, at 11:59 AM, Liam Randall <liam.randall at gmail.com> wrote:

> @Broala_ has one posted in their repo.
> 
> DHCP POC is out:
> 
> https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/
> 
> Add it to the list.

i've got that working under Linux at least, it doesnt' work on my mac, but it may be I'm not doing quite the right thing in the DHCP server.



--
Nicholas Weaver                  it is a tale, told by an idiot,
nweaver at icsi.berkeley.edu                full of sound and fury,
510-666-2903                                 .signifying nothing
PGP: http://www1.icsi.berkeley.edu/~nweaver/data/nweaver_pub.asc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140925/9bae4cb4/attachment.bin