CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 A small explanation of an Apache path traversal bug and an incomplete fix Task 1: A Bit of Background... A Brief History On the 5th of October 2021, a CVE detailing a path traversal attack on Apache...

CVE-2021-41773-PoC

CVE-2021-41773-PoC PoC for CVE-2021-41773 with docker to demonstrate Run Just run ./poc.sh. Make sure you have working docker and docker-compose root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done...

POC-CVE-2021-41773

POC CVE-2021-41773 N|Solid Poc para testear la vulnerabilidad CVE-2021-41773 correspondiente al servicio apache httpd 2.4.49. POC Open your favorite Terminal and run these commands. First Tab: root@kitploit: wget https://raw.githubusercontent.com/TishcaTpx/POC-CVE-2021-41773/main/poc.py Second Ta...

CVE-2021-41773

CVE-2021-41773 Projet PoC&Exp en Go. Déclaration : Ce projet provient des notes d'étude quotidiennes de l'auteur. Ne pas utiliser les technologies et outils associés pour des tests illégaux. L'auteur décline toute responsabilité en cas de conséquences néfastes. Utilisation : root@kitploit: ./main...

cve-2021-41773

Cve-2021-41773-grabber Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 This script grabber vuln server for cve 2021-41773 from shodan How to Usage : use python 3 install shodan module " pip install shodan" change keyword on script with your shodan keyword need your...

CVE-2021-41773

Apache Path Traversal & RCE Exploit CVE-2021-41773 & CVE-2021-42013 These are critical path traversal vulnerabilities affecting Apache HTTP Server 2.4.49 and 2.4.50. They allow attackers to: Access files outside the web root LFI Achieve Remote Code Execution RCE if CGI is enabled Both...

py-CVE-2021-41773

CVE-2021-41773 Python语言poc&exp项目。 声明：该项目来自作者日常学习笔记。 请勿利用相关技术以及工具从事非法测试，如因此产生的一切不良后果作者无关。 使用： python main.py -h 查看帮助 python main.py -u 利用漏洞 python main.py -f url.txt 批量测试漏洞是否存在 python main.py -f url.txt -o bug.txt 批量测试漏洞是否存在,存在的写入bug.txt中...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013 In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal a...

CVE-2021-41773_CVE-2021-42013

CVE-2021-41773CVE-2021-42013 CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batch detection and exploitation tool Introduction This tool can only be used for security testing, do not use for illegal purposes! Tool Purpose CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batc...

docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build root@kitploit: ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh root@kitploit:...

cve-2021-41773-nse

cve-2021-41773-nse By George Labrin @creadpag N|Solid Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. First Tab: root@kitploit: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: root@kitploit: sudo nmap -Pn...

CVE-2021-41773

В этом репозитории нет README...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 Apache 2.4.49용 자동 스캐너 root@kitploit: • 실행: go run main.go 또는 go build main.go && ./main • 페이로드를 직접 사용자 정의할 수 있습니다 • 취약한 호스트가 저장됩니다 root@kitploit: 실습 환경 만들기: 1. 이미지 가져오기: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. 이미지 실행: sudo docker run -dit -p 8080:80...

CVE-2021-41773-Scanner

CVE-2021-41773 Shodan scanner CVE-2021-41773 Shodan scanner via multithread Python script Usage: root@kitploit: git clone https://github.com/anldori/CVE-2021-41773-Scanner cd CVE-2021-41773-Scanner/ Add your private Shodan API to scan.py root@kitploit: python3 scan.py...

exploit-apache2-cve-2021-41773

Эксплойт для Apache2 Эксплойт для уязвимости обхода пути в Apache. Версия: 2.4.49 CVE: CVE-2021-41773 Загрузка docker-образа root@kitploit: docker pull httpd:2.4.49-alpine Настройка apache В файле /usr/local/apache2/conf/httpd.conf замените следующие записи root@kitploit: AllowOverride none -...

apache-vulnerable

Scan FOR APACHE versions "ZERO-DAY" Apache Version 2.4.49 and 2.4.50 CVE-2021-41773 and CVE-2021-42013 How to use : You Will need nuclei ! https://github.com/projectdiscovery/nuclei Check local nuclei install and verify template nuclei -t apache-vulnerable-versions.yaml -vv and nuclei -t...

CVE-2021-41773

CVE-2021-41773 Привет, ребята! Вчера вышла новая CVE-2021-41773 для версии apache 2.4.49. В связи с этим я хочу рассказать об этой уязвимости в apache. Полигон Итак, думаю, вы, ребята, хотите протестировать эту уязвимость на сайте. Поэтому у меня есть для вас полигон. Это сайт, где можно скачать...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. root@kitploit: AllowOverride none Require all granted Create a Dockerfile in your project root@kitploit: FROM httpd:2.4.49...

CVE-2021-41773

This repository does not have a README...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Некоторые образы Docker для игры с CVE-2021-41773 и CVE-2021-42013 запустите docker compose up -d, чтобы поднять все контейнеры. Серверы будут работать на портах 8080, 8081, 8082 и 8083. 8080 содержит Apache 2.4.49 с отключенным CGI. 8081 содержит Apache 2.4.49 с...