/ tags

#cve-2014-6271

1 writeup tagged cve-2014-6271.

Shocker easy featured
A CGI shell script backed by a vulnerable Bash lets a crafted HTTP header trigger Shellshock (CVE-2014-6271) for RCE. Privesc via a passwordless sudo rule on perl, one GTFOBins command to root.
linuxwebcgishellshockcve-2014-6271sudogtfobinsprivesc
01 Jul 2026
HTB
← All writeups
Copied