Sploitus

Exploit for bash

kitploit · 2026-08-28

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JOAOMAGFREITAS-BASH-CVE-2017-17562
# bash-CVE-2017-17562

Un'implementazione PoC in `Bash` per `CVE-2017-17562`.

Richiede `curl` per creare richieste HTTP.

Basato sulle implementazioni di Metasploit e @fssecur3.

## Arguments

The following arguments need to be set as they are required for reconnaissance + payload send:

root@kitploit:~
    
    
    $1: IP/Host of remote vulnerable machine being attacked
    $2: Port of remote machine webserver
    $4: Path to crafted payload being sent to vulnerable machine
    

Opzionalmente, è possibile impostare anche i seguenti argomenti:

root@kitploit:~
    
    
    $3: If the web server is running under a TLS/SSL tunnel. Defaults to no
    $5: Path to list of known vulnerable CGI endpoints, to be used in reconnaissance phase. Defaults to "cgi.endpoints"
    

## Example