LetsDefend : Shellshock Attack


You must to find details of shellshock attacks

Log file: https://app.letsdefend.io/download/downloadfile/shellshock.zip
Pass: 321

Note: pcap file found public resources.

Download the pcap file and filter out with HTTP.

Follow the HTTP request that has the 500 Internal Server Error. Errors often showcases information.

Question 1

What is the server operating system?

Answer : Ubuntu

Follow the stream of the HTTP and you will notice the server version in the address and the input used by the attacker once shellshock exploit is loaded.

Question 2

What is the application server and version running on the target system?

Question 3

What is the exact command that the attacker wants to run on the target server?

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

Comments (



%d bloggers like this: