1161 matches found
CVE-2021-41773
CVE-2021-41773 Apache httpd only 2.4.49 For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 Exploit This vulnerability affec...
CVE-2026-23918-Double-free-Apache-httpd-mod_http2
CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...
CVE-2024-27316_poc
CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start docker-compose up -d Connectivity check httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version curl --http2 -i --head...
CVE-2021-41773
CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...
Binary-Exploitation-and-Kernel-Escalation
Binary-Exploitation-and-Kernel-Escalation Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of modssl CVE-2002-0082. Privilege escalation was subsequently achieved by exploiting a race condition in...
CVE-2021-4773
CVE-2021-4773 this is a practice example of how exploit vulnerability CVE-2021-4773 with a virtual machine for this tutorial you need the next virtual machine as kali linux virtual machine as ubuntu server install apache version 2.4.49 so lets started when you have 2 virtual machines running you...
CVE-2025-53020-PoC
CVE-2025-53020 - Apache httpd HTTP/2 Memory Exhaustion PoC A proof of concept demonstrating CVE-2025-53020, a memory exhaustion vulnerability in Apache httpd's HTTP/2 implementation I found in mid-2025. 📖 Deep dive : galbarnahum.com/posts/apache-httpd-cve-2025-53020 Vulnerability Overview Apache...
CVE-2021-41773-Playground
CVE-2021-41773-Playground Some docker images to play with CVE-2021-41773 and CVE-2021-42013 run docker compose up -d to spin up all the containers. Servers will run on ports 8080, 8081, 8082, and 8083. 8080 contains an Apache 2.4.49 with CGI disabled. 8081 contains an Apache 2.4.49 with CGI...
POC-CVE-2021-41773
POC CVE-2021-41773 N|Solid POC to test the vulnerability CVE-2021-41773 corresponding to the Apache httpd 2.4.49 service. POC Open your favorite Terminal and run these commands. First Tab: wget https://raw.githubusercontent.com/TishcaTpx/POC-CVE-2021-41773/main/poc.py Second Tab: python3 poc.py...
CVE-2021-41773_42013
CVE-2021-41773 and CVE-2021-42013 Lab Setup Setup $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTE: The httpd.conf files are configured to be vulnerable to RCE by...
http2-bomb-detector
http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destructive vulnerability detection tool — for Nginx / Apache httpd Vulnerability Background CVE-2026-49975 is a widespread remote denial-of-service vulnerability in the HTTP/2 protocol layer, discovered by security researcher Quang Luong. This...
CVE-2019-10092_Docker
CVE-2019-10092 Docker - Apache HTTP Server Using $ docker-compose up Using from Docker Hub $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...
apache-httpd-path-traversal-checker
Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...
exploit-apache2-cve-2021-41773
Exploit for Apache2 Exploit for path transversal vulnerability in apache. Version: 2.4.49 CVE: CVE-2021-41773 Pull docker image docker pull httpd:2.4.49-alpine Configure apache In /usr/local/apache2/conf/httpd.conf replace these entries AllowOverride none - Require all denied + Require all denied...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...
CVE-2021-41773
CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...
optionsbleed
optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: snallygaster -t optionsbleed host usage optionsbleed -h -n N -a -u hosttocheck Check for the...
apache_audit_cve-2026-23918
cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...
CVE-2026-23918
CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Affected: httpd 2.4.66 with modhttp2 and multi-threaded MPM event/worker. Fixed in: 2.4.67. Found and reported by Bartlomiej Dmitruk striga.ai and Stanislaw Strzalkowski isec.pl. Writeup:...
