Well, yes. If you were going to exploit CGI scripts you'd likely use wget or cur... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tokenizerrr on Sept 25, 2014 \| parent \| context \| favorite \| on: Shellshock DHCP Remote Code Execution – Proof of C... Well, yes. If you were going to exploit CGI scripts you'd likely use wget or curl instead of coding an HTTP client from scratch so why is this suprising?

halfdeadcat on Sept 25, 2014 [–]

It's a little surprising because I'm tempted to classify this one as 'requires 0 lines of code'.

zobzu on Sept 26, 2014 | [–]

its pretty much the same for CGIs, its a one liner. theres other exploits like that. it happens :)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact