Shellshock DHCP RCE Proof of Concept

This document is a proof-of-concept showing how the Bash 'Shellshock' vulnerability can be exploited through DHCP option 114 by inserting a payload such as "() { ignored;}; echo 'foo'" into DHCP string values; when clients renew DHCP leases and run hook scripts (often as root), the injected command may execute.