CVE-2024-40725

HTTP Request Smuggling 감지 도구 이 저장소는 HTTP Request Smuggling 취약점을 탐지하는 Python 기반 도구를 포함하며, 특히 CVE-2024-40725를 대상으로 합니다. 이 도구는 조작된 HTTP 요청을 보내고 서버의 응답을 분석하여 Apache HTTP Server에서 이 취약점을 악용하려고 시도합니다. 주된 목표는 특정 경로에 대한 제한을 우회하는 등 상태 코드나 접근 동작의 차이를 식별하는 것입니다. 기능 HTTP Request Smuggling 취약점 탐지 단일 URL 테스트 및...

CVE-2021-41773

CVE-2021-41773 사용법 docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py CVE-2021-41773이란? CVE-2021-41773 Apache HTTP Server 2.4.49의 디렉토리 트래버설 취약점입니다. Require all denied가 설정되지 않은 경우에 발생합니다. %2e로 인코딩된...

CVE-2021-41773

CVE-2021-41773 이것은 Apache 경로 탐색 취약점에 대한 간단한 poc입니다. 취약한 버전: Apache/2.4.49 Apache/2.4.50 modcgi가 비활성화된 상태...

CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49의 경로 탐색 및 파일 공개 취약점 사용법 python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com 참고 자료 https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited https://nvd.nist.gov/vuln/detail/CVE-2021-41773...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE Apache HTTP Server 2.4.49의 경로 정규화 변경 사항에서 결함이 발견되었습니다. 공격자는 경로 순회path traversal 공격을 사용하여 Alias 유사 지시문으로 구성된 디렉터리 외부의 파일에 URL을 매핑할 수 있습니다. 이 디렉터리 외부의 파일이 일반적인 기본 구성인 "require all denied"로 보호되지 않는 경우 이러한 요청은 성공할 수 있습니다. 또한 이러한 별칭aliased 경로에 대해 CGI 스크립트가 활성화된 경우 원격 코드 실행이 가...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-24072 DESCRIPTION: An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of...

CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 경로 탐색 및 원격 코드 실행 📖 설명 이것은 Apache HTTP Server 2.4.49의 경로 탐색 및 원격 코드 실행 취약점인 CVE-2021-41773에 대한 개념 증명 익스플로잇입니다. 취약점 세부 정보 CVE : CVE-2021-41773 영향을 받는 버전 : Apache HTTP Server 2.4.49 취약점 유형 : 경로 탐색 → 원격 코드 실행 🚀 사용법 설치 git clone...

CVE-2026-23918-Passive-Audit

CVE-2026-23918 감사 스크립트 대안으로 curl을 사용해 헤더를 가져와서 살짝 들여다볼 수도 있지만, 여기에 더 나은 방법이 있습니다: Apache HTTP Server를 위한 비침습적 HTTP 메타데이터 감사 도구 CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19 노출 분류. 이 도구는 일반 HTTP HEAD/GET 요청을 보내고 TLS ALPN 협상을 수행하여 HTTP/2 지원 여부를 관찰합니다. 요구 사항 Python 3.13 이상...

apache-web-log-analysis-lab

Apache Web Log Analysis Lab Blue Team lab focused on analyzing Apache HTTP server logs to detect web scanning activity, directory enumeration, and path traversal attempts. Objective Install and expose an Apache web server in an isolated lab environment, simulate automated web scanning using...

mac0352-ep4

mac0352-ep4 Apache HTTP Server 2.4.23 취약점 연구 CVE-2016-8740...

PT-2026-103935

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.69 Description A stack-based buffer overflow exists in the mod vhost alias module. A remote client can trigger a denial of service or potentially execute arbitrary code by sending an HTTP request with a...

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779297093)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779297093 advisory. - Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this...

Apache HTTPD: CVE-2026-79768: Path Equivalence: '/./' (Single Dot Directory)

Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2026-73637: Use After Free

Use after free in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifeti...

CVE-2026-73636: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in modauthdigest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle MITM attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's share...

CVE-2026-63718: Inconsistent Interpretation of HTTP Requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

CVE-2026-63686: NULL Pointer Dereference

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-58415: Files or Directories Accessible to External Parties

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

CVE-2026-56153: Out-of-bounds Write

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-48005: Missing Authentication for Critical Function

Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced re-authentication via forged Authorization headers when Digest authentication is enabled with...