Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of modssl CVE-2002-0082. Privilege escalation was subsequently achieved by exploiting a race condition in...

CVE-2025-53020-PoC

CVE-2025-53020 - Apache httpd HTTP/2 Memory Exhaustion PoC A proof of concept demonstrating CVE-2025-53020, a memory exhaustion vulnerability in Apache httpd's HTTP/2 implementation I found in mid-2025. 📖 Deep dive : galbarnahum.com/posts/apache-httpd-cve-2025-53020 Vulnerability Overview Apache...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Some docker images to play with CVE-2021-41773 and CVE-2021-42013 run docker compose up -d to spin up all the containers. Servers will run on ports 8080, 8081, 8082, and 8083. 8080 contains an Apache 2.4.49 with CGI disabled. 8081 contains an Apache 2.4.49 with CGI...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

apatchy

apatchy Un framework de fuzzing en proceso para Apache HTTPD apatchy te permite fuzzear el pipeline completo de procesamiento de solicitudes HTTP de Apache - parseo, hooks, filtros, handlers - sin ninguna E/S de red. Reemplaza la capa de sockets de Apache con filtros de E/S personalizados,...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Affected: httpd 2.4.66 with modhttp2 and multi-threaded MPM event/worker. Fixed in: 2.4.67. Found and reported by Bartlomiej Dmitruk striga.ai and Stanislaw Strzalkowski isec.pl. Writeup:...

POC-CVE-2021-41773

POC CVE-2021-41773 N|Solid POC to test the vulnerability CVE-2021-41773 corresponding to the Apache httpd 2.4.49 service. POC Open your favorite Terminal and run these commands. First Tab: root@kitploit: wget https://raw.githubusercontent.com/TishcaTpx/POC-CVE-2021-41773/main/poc.py Second Tab:...

exploit-apache2-cve-2021-41773

Exploit for Apache2 Exploit for path transversal vulnerability in apache. Version: 2.4.49 CVE: CVE-2021-41773 Pull docker image root@kitploit: docker pull httpd:2.4.49-alpine Configure apache In /usr/local/apache2/conf/httpd.conf replace these entries root@kitploit: AllowOverride none - Require a...

CVE-2024-27316_poc

CVE-2024-27316 Inundación de CONTINUACIÓN HTTP/2 PoC Servidor objetivo Apache httpd Iniciar root@kitploit: docker-compose up -d Verificación de conectividad httpd v2.4.58 vulnerable root@kitploit: curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ http...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...

CVE-2021-4773

CVE-2021-4773 this is a practice example of how exploit vulnerability CVE-2021-4773 with a virtual machine for this tutorial you need the next virtual machine as kali linux virtual machine as ubuntu server install apache version 2.4.49 so lets started when you have 2 virtual machines running you...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Using root@kitploit: $ docker-compose up Using from Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...

http2-bomb-detector

http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destructive vulnerability detection tool — for Nginx / Apache httpd Vulnerability Background CVE-2026-49975 is a widespread remote denial-of-service vulnerability in the HTTP/2 protocol layer, discovered by security researcher Quang Luong. This...

apachedos

This tool uses CVE-2016-8740 to crash servers running Apache HTTPD 2.4.17 - 2.4.23 that support HTTP2. It crashes these servers by forcing them to allocate insanely large amounts of RAM, making the computer unuasable. It can be downloaded here you will need to run it from the command line Usage:...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...

POC-CVE-2021-41773

POC-CVE-2021-41773 este es un script simple para el Apache HTTPd 2.4.49 que es vulnerable a CVE-2021-41773. Uso: Comprobar 1 IP Comprobar desde archivo...

CVE-2021-41773-i-

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. root@kitploit: AllowOverride none Require all granted Create a Dockerfile in your project root@kitploit: FROM httpd:2.4.49...

CVE-2021-41773

Zona de pruebas CVE-2021-41773 Esta es una pequeña receta de Docker para configurar un contenedor basado en Debian bookworm con una instancia de Apache HTTPd 2.4.49 vulnerable a CVE-2021-41773. El CGI se ha habilitado explícitamente para probar/verificar tanto el comportamiento de divulgación de...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...