Automated pentest framework for offensive security experts

Shellshock exploit + vulnerable environment

XSHOCK Shellshock Exploit

Automated Tools Pentest

Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)

SixArm.com » Bash » Shellshock security testing and patching

On September 24, 2014, a severe vulnerability in Bash was identified. Nicknamed Shellshock, this vulner- ability can exploit many systems and be launched either remotely or from a local machine. In this lab, you will work on this attack, so you can understand the Shellshock vulnerability. The learning objective of this lab is for you to get a first-hand experience on this interesting attack, understand how it works, and think about the lessons that we can get out of this attack.

Just a collection of different scripts that I might sometimes use to test stuff / Solo una colección de diferentes scripts que a veces podría usar para probar cosas.

A basic ahk script that implements autoreloading into Shellshock