Bash Shellshock Vulnerability Scanner

Shellshock (CVE-2014-6271, CVE-2014-7169) is a security bug discovered by Stephane Chazelas in the popular Bash Linux shell, which allows an attacker to execute commands from environment variables. Essentially, when successfully exploited, the Shellshock vulnerability allows an attacker to attain remote code execution. While Bash is not a publicly exposed Internet service, operating system environment variables are used by many internet-facing services such as web servers to pass configuration values. The reason command execution is possible with the Shellshock bash vulnerability is that Bash did not sanitise environment variables before it executed them. As a result, an attacker can end up executing commands on the target server operating system through nothing but HTTP requests. While the Shellshock bash bug is an old vulnerability, there are still thousands of webservers and applications vulnerable to it. Just like the Heartbleed vulnerability, leaving the Bash Shellshock vulnerability unpatched is a major security risk. This is where Acunetix can help. Acunetix is a web application vulnerability scanner, which automatically tests the security posture of your web applications, as well as any server security misconfigurations. Acunetix allows you to assess web application and web server security by testing for thousands of vulnerabilities quickly and accurately on a regular basis. Acunetix achieves this by combining a crawler and scanner with a vast array of highly tuned test cases, intelligently designed to run as fast and efficiently as possible.