mirror of
https://github.com/cliffe/SecGen.git
synced 2026-02-22 19:58:03 +00:00
60cd05536d
New scenario combines the two & is exploitable with msf module: exploit/multi/http/apache_mod_cgi_bash_env_exec
19 lines
576 B
Puppet
19 lines
576 B
Puppet
class shellshock::install{
|
|
|
|
file { '/usr/local/src/bash-4.1.tar.gz':
|
|
ensure => file,
|
|
source => 'puppet:///modules/shellshock/bash-4.1.tar.gz',
|
|
}
|
|
|
|
exec { 'unpack-bash-tar':
|
|
cwd => '/usr/local/src',
|
|
command => '/bin/tar -xzf /usr/local/src/bash-4.1.tar.gz',
|
|
creates => '/usr/local/src/bash-4.1/',
|
|
}
|
|
|
|
exec { 'configure-make-make-install-bash':
|
|
cwd => '/usr/local/src/bash-4.1/',
|
|
command => '/bin/bash /usr/local/src/bash-4.1/configure; /usr/bin/make; /usr/bin/make install;',
|
|
require => Exec['unpack-bash-tar'],
|
|
}
|
|
} |