http://www.shellshocktest.com/
and
http://shellshock.brandonpotter.com/
There is a well maintained guide at Digital Ocean that explains the nitty gritty details:
https://www.digitalocean.com/community/tutorials/how-to-prot...
If a server is vulnerable there is a great guide that helps you to deal even with old systems:
https://dmsimard.com/2014/09/25/the-bash-cve-2014-6271-shell...