With CVE2014 shellshocked,  after installing it, you can check your ip using “ifconfig”, cause it’s a linux based OS. After that, open your kali machine to ping that CVE2014 IP. Open a browser in kali, and type that ip add. It will look something like that “ CVE-2014-6271
This system is running:
	•	uptime: 19:39:17 up 14 min, 1 users, load average: 0.00, 0.01, 0.00
	•	kernel: Linux vulnerable 3.14.1-pentesterlab #1 ”, then right after that ip addr in your browser, add this “cgi-bin/status”. If it brings you sth similar to this “ { "uptime": " 19:40:41 up 15 min, 1 users, load average: 0.00, 0.01, 0.00", "kernel": "Linux vulnerable 3.14.1-pentesterlab #1 SMP Sun Jul 6 09:16:00 EST 2014 i686 GNU/Linux"} 
 ”, that means it is vulnerable. Now, you can run metasploit, use exploit linux meterpreter to attack that machine.

If you want to make a shellshock attack on your kali linux machine to a particular target machine, you can ping that victim IP to see if it’s connected to the internet “ping IP blabla”, then type the nmap command “nmap -sV -p- —script http-shellshock 192.168.1.104” for example. If the script is not working for you, just update your kali machine.
This scan is a deep scan, so it might take long time to finish (30min, 40 for example), It might happen too it takes some seconds only. If you want to see its process, just press enter enter enter to check at how much percent it is.
After that, you can run metasploit to have control of the command prompt of the victim’s machine. You know how already.

Now, suppose you are in his cmd terminal of his windows machine in your metasploit kali machine, type this command:
env x=‘() { :;}; echo vulnerable’ bash -c ‘echo just anything’ ,,, then press enter. It will give you 2 texts “vulnerable and just anything”. 
env x=‘() { :;}; cat /etc/passwd’ bash -c ‘echo just anything’ , if you know that he has a file which named “passwd” in his “etc” directory.