May 2017
Intermediate to advanced
416 pages
21h 33m
English
If the application does not return any output, you could use the remote code execution functionality to test if a command executes successfully. For example, you may ping your host back and look for incoming ICMP packets in your traffic.
The script argument http-shellshock.uri sets the default path to probe. By default, the script will probe the web root folder (/):
$ nmap -sV --script http-shellshock --script-args uri=/cgi-bin/notify <target>
Read now
Unlock full access