Sample Header Ad - 728x90

Point of the semicolon in this shellshock attack

4 votes
1 answer
1908 views
I was reviewing a shellshock attack and didn't understand this piece of code: curl -v http://localhost/cgi-bin/shellshock.cgi -H "custom:() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd " The part that I don't understand is the function of the echo ; in the actually executed command on the remote machine between echoing the Content-Type and /bin/cat on /etc/passwd. What is the function of echo ; here? Thanks.
Asked by henry (43 rep)
Jan 20, 2018, 12:54 AM
Last activity: Jan 20, 2018, 01:23 AM