Skip to content

Commit 27b8580

Browse files
committed
Add protip to description
This gets you lots of shells.
1 parent b1e9b36 commit 27b8580

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

modules/auxiliary/scanner/http/apache_mod_cgi_bash_env.rb

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,9 @@ def initialize(info = {})
1717
This module exploits a code injection in specially crafted environment
1818
variables in Bash, specifically targeting Apache mod_cgi scripts through
1919
the HTTP_USER_AGENT variable.
20+
21+
PROTIP: Use exploit/multi/handler with a PAYLOAD appropriate to your
22+
CMD, set ExitOnSession to false, run -j, and and then run this module.
2023
},
2124
'Author' => [
2225
'Stephane Chazelas', # Vulnerability discovery

0 commit comments

Comments
 (0)