News for hackers. Stuff that matters.

A comment on Shellshock DHCP Remote Code Execution – Proof of Concept. Parent comment

Re:Shellshock DHCP Remote Code Execution – Proof of Concept by tokenizerrr on Thursday September 25, 2014 @07:06PM (#8370332)
Well, yes. If you were going to exploit CGI scripts you'd likely use wget or curl instead of coding an HTTP client from scratch so why is this suprising?
[ Parent | on HN ]
Re:Shellshock DHCP Remote Code Execution – Proof of Concept by halfdeadcat on Thursday September 25, 2014 @07:11PM (#8370355)
It's a little surprising because I'm tempted to classify this one as 'requires 0 lines of code'.
[ Parent | on HN ]
Re:Shellshock DHCP Remote Code Execution – Proof of Concept by zobzu on Thursday September 25, 2014 @10:29PM (#8371027)
its pretty much the same for CGIs, its a one liner. theres other exploits like that. it happens :)
[ Parent | on HN ]