CVE-2021-41773

CVE-2021-41773 Usage docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server 2.4.49. Occurs when Require all...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...

exploit-apache2-cve-2021-41773

Exploit for Apache2 Exploit for path transversal vulnerability in apache. Version: 2.4.49 CVE: CVE-2021-41773 Pull docker image docker pull httpd:2.4.49-alpine Configure apache In /usr/local/apache2/conf/httpd.conf replace these entries AllowOverride none - Require all denied + Require all denied...

apache__jspwiki_CVE-2019-10078_2_11_0_M4_fixed

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

apache__jspwiki_CVE-2019-10077_2_11_0_M4_fixed

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

dashbuilder

Dashbuilder Dashbuilder is a general purpose dashboard and reporting web app which allows for: Visual configuration and personalization of dashboards Support for different types of visualizations using several charting libraries Full featured editor for the definition of chart visualizations...

CVE-2021-41773

CVE-2021-41773 This is a simple poc for Apache Path Traversal Vulnerability Vulnerable versions: Apache/2.4.49 Apache/2.4.50 with modcgi disabled...

apache_kylin

Apache Kylin Codacy Badge Extreme OLAP Engine for Big Data Apache Kylin is an open source Distributed Analytics Engine, contributed by eBay Inc., provides SQL interface and multi-dimensional analysis OLAP on Hadoop supporting extremely large datasets. For more details, see the website...

CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...

CVE-2025-24813-PoC-exploit

CVE-2025-24813-PoC-exploit Apache Tomcat Deserialization RCE ❯ python3 exploit.py http://localhost:8080/ "id" ============================================================ CVE-2025-24813 - Apache Tomcat Partial PUT RCE ============================================================ Target:...

Log4Shell-CVE-2021-44228-

Log4Shell CVE-2021-44228 - SOC Report Analysis Overview This repository contains a comprehensive Security Operations Center SOC analysis of Log4Shell CVE-2021-44228 , one of the most critical vulnerabilities discovered in 2021. The vulnerability affects the Apache Log4j logging library and poses ...

log4j_checker_beta

log4jcheckerbeta - Linux, macOS and Windows Scripts If you want to use the windows/linux download cradles below, please review the scripts beforehand. Loading code from the internet and execute it is what brought us here with Log4Shell - right? ;- Linux and macOS servers or clients The...

CVE-2021-44228

CVE-2021-44228 Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x has other vulnerabilities, it is recommended to update to the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: Download this project, compi...

CVE-2026-49975-HTTP-2-Bomb

A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Usage python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Reference https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2021-41773

CVE-2021-41773 apache version 2.4.49 simaple poc How use scipt chmod +x apache.sh ./apache.sh exmaple ./apache.sh http://127.0.0.1 etc/passwd...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...

CVE-2023-46604

Technical Summary of the Attack: CVE-2023-46604 The script exploits an insecure deserialization vulnerability in Apache ActiveMQ CVE-2023-46604 to achieve remote code execution on the target server. Description of the Exploitation Process Vulnerability Target: The vulnerability resides in the...

CVE-2023-46604-LAB

CVE-2023-46604 – Apache ActiveMQ RCE OpenWire Protocol This repository documents a lab environment used to understand and detect the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The goal of this project: Understand how the exploit behaves at the protocol level Capture malicious OpenWir...