May 2017
Intermediate to advanced
416 pages
21h 33m
English
The script http-shellshock limits its probe to a single resource. If you wish to set a different path other than the web root folder, you must set the script argument http-shellshock.uri. However, there are times when the web servers will link to many pages, making it difficult to iterate over all the available pages/applications. I have developed a modified version of http-shellshock that uses the NSE spidering library to automate this check in every page found in a web server.
You can grab the unofficial script from my GitHub repository:
https://github.com/cldrn/nmap-nse-scripts/blob/master/scripts/http-shellshock-spider.nse
Read now
Unlock full access