diff --git a/rules/vulnerabilities/rule_shellshock.py b/rules/vulnerabilities/rule_shellshock.py index 2373df3..7d558c7 100644 --- a/rules/vulnerabilities/rule_shellshock.py +++ b/rules/vulnerabilities/rule_shellshock.py @@ -13,7 +13,7 @@ def __init__(self): self.rule_confirm = 'Shellshock RCE' self.rule_details = '' self.rule_mitigation = '''Patch the vulnerable system's kernel to a non-vulnerable version.''' - self.intensity = 1 + self.intensity = 3 def check_rule(self, ip, port, values, conf): c = ConfParser(conf) @@ -33,7 +33,6 @@ def check_rule(self, ip, port, values, conf): if not resp: continue - if resp and re.search('root:[x*]:0:0', resp.text): self.rule_details = 'Remote Code Execution Shellshock' js_data = {