Created documentation for apache_mod_cgi_bash_env.rb

[exigentmidnight]

Based on issue #12389 I identified that documentation did not yet exist for apache_mod_cgi_bash_env.rb. I setup an environment to run the scanner against that was vulnerable and verified that the scanner was functioning. I also included directions for someone else who may want to test the issue but did not know how to create a vulnerable environment. Thanks!

[h00die]

@exigentmidnight Thanks for the docs contribution!!!! A few things:

1. can you submit this from a branch other than master. See Add phpstudy backdoor exploitation module #12974 (comment)
2. we now have tools/dev/msftidy_docs.rb <doc_file> to help with some style things. Can you please run it against these docs to get some things fixed up.
3. you have a lot of commits for a single file. I would recommend the following: do the msftidy fixes, fix up all my review comments, THEN when you create a new branch to submit from, just copy/paste this file in there. This way it'll only have 1 commit (your final product) instead of the rest.

I'll go ahead and give it a review now though so you can incorporate those fixes on the single commit branch you submit soon.

[exigentmidnight]

Thanks! I'll be happy to make those edits and submit it the right way :)

[h00die]

Solid first attempt. Love the details on setting up an environment and such (since the devil is in the details on setting up vuln envs). Good job!

[h00die]

can be moved up under Vulnerable Application