Has anybody looked for historical Shellshock exploit traffic (in old/backed-up logfiles)?
Though none of the exploits I have seen thus far look very obfuscatible and therefore probably would've been discovered already.
Though none of the exploits I have seen thus far look very obfuscatible and therefore probably would've been discovered already.
What freaks me out though is that these systems were vulnerable. All this time; it was right there. Its like finding out you just drove from LA to NYC with nothing but a single loose lug nut on your left front tire.
Now that the exploit is public, people don't care anymore, but anyone who knew about this bug and tried to exploit it before it was public would be careful to avoid using a commonly-logged HTTP header.
https://docs.google.com/document/d/1vN2QOG2OZIAHGXDmd5wB8FPi...