RE: "Shellshock" bash exploit + temporary patch 09-26-2014, 03:45 PM
#21
(09-25-2014, 08:46 PM)Reiko Wrote: Aaaaand we're fucked
Img
Even moar fucked https://github.com/rapid7/metasploit-fra.../pull/3891
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
| Tutorial "Shellshock" bash exploit + temporary patch filter_list | |
Even moar fucked https://github.com/rapid7/metasploit-fra.../pull/3891
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
RE: "Shellshock" bash exploit + temporary patch 09-26-2014, 05:13 PM
#22
(09-26-2014, 03:45 PM)Dyme Wrote: Even moar fucked https://github.com/rapid7/metasploit-fra.../pull/3891
It belongs to the Skildren now... :p
---
Click here to get started with Linux!
If I helped you, please +rep me, apparently we've started over on Rep and I'd like to break 100 again...
Click here to get started with Linux!
If I helped you, please +rep me, apparently we've started over on Rep and I'd like to break 100 again...
Inori Wrote: got clickbaited by roger
RE: "Shellshock" bash exploit + temporary patch 09-26-2014, 05:38 PM
#23
(09-26-2014, 05:13 PM)roger_smith Wrote: It belongs to the Skildren now... :p
Even worse...
http://farlight.org/index.html?file=plat...Advisory=0
Now anyone with the ability to install pnscan and run a Perl script will be mass pwning. RIP in peace, hacking community.
RE: "Shellshock" bash exploit + temporary patch 09-26-2014, 06:26 PM
#25
(09-26-2014, 05:38 PM)Dyme Wrote: Even worse...What the fuck was this guy trying to achieve making tools like this and releasing them for everyone to use. The fact he includes the scanner in the description of the exploit makes it soo much worse.
http://farlight.org/index.html?file=plat...Advisory=0
Now anyone with the ability to install pnscan and run a Perl script will be mass pwning. RIP in peace, hacking community.
#MakeSinisterlySexyAgain
![[Image: S2OkreG.png]](http://i.imgur.com/S2OkreG.png)
RE: "Shellshock" bash exploit + temporary patch 09-27-2014, 01:14 AM
#27
(09-27-2014, 01:11 AM)Equinox Wrote: Uh... wat?
Unless there's a malicious DHCP server on a network you're trying to connect to, you're fine for the moment. It's more dangerous to people running remotely accessible systems.
Update as soon as possible anyway.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47
RE: "Shellshock" bash exploit + temporary patch 09-27-2014, 01:16 AM
#28
For once, on this VERY rare occasion, Windows/Windows Server is safe.
EDIT: This exploit's been around since the 90's?
EDIT: This exploit's been around since the 90's?
RE: "Shellshock" bash exploit + temporary patch 09-27-2014, 01:18 AM
#29
(09-27-2014, 01:14 AM)Reiko Wrote: Unless there's a malicious DHCP server on a network you're trying to connect to, you're fine for the moment. It's more dangerous to people running remotely accessible systems.
Update as soon as possible anyway.
Ah, okay, was a little confused for second (t'was on my personal computer).
![[Image: BXqGARG.png]](https://i.imgur.com/BXqGARG.png)
RE: "Shellshock" bash exploit + temporary patch 09-27-2014, 06:29 AM
#30
(09-26-2014, 03:41 PM)OldWolf Wrote: iptables -I INPUT -p tcp --dport 80 -m string --algo bm --string '() { :;};' -j DROP
X-Random-HTTP-Header: () { fake function all this is ignored;}; your filter is bypassed
Sorry, it's not that easy.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47
