I think in world of multiple forks and vendors the most reliable way is just testing for the exploit itself,

Most definitely.

For instance does my dash not even support the --version option

Then it's not bash.