pull out shell-shock vulnerability tests into a separate file with more descriptive echos