POC & Lab For CVE-2021-41773
Exploit created in python3 to exploit known vulnerabilities in Apache web server (CVE-2021-41773, CVE-2021-42013)
CVE-2021-41773 的复现
A comprehensive analysis of CVE-2021-41773 (Apache HTTP Server 2.4.49), featuring vulnerability research, controlled lab-based exploitation, Proof-of-Concept development, root cause analysis, and mitigation strategies for educational and defensive security purposes.
Proof-of-concept exploit for CVE-2021-41773, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49. Automates vulnerability check and reverse shell payload execution.
CVE-2021-41773 Shodan scanner
Proof-of-concept (PoC) for CVE-2021-41773, demonstrating Apache HTTP Server 2.4.49 path traversal and remote code execution (RCE) in a controlled lab environment.
The POC and Lab setup documentation of CVE 2021 41773
Apache 2.4.49
Python exploit for Apache 2.4.49 path traversal and RCE (CVE-2021-41773) that sends crafted requests to execute arbitrary commands on vulnerable servers.
A Python script to check if an Apache web server is vulnerable to CVE-2021-41773
Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution PoC (CVE-2021-41773 & CVE-2021-42013)
CVE-2021-41773 playground
Python exploit for CVE-2021-41773 - Apache HTTP Server 2.4.49 Path Traversal vulnerability
Vulnerable docker images for CVE-2021-41773
Exploit tool for Apache 2.4.49-2.4.50 path traversal and RCE (CVE-2021-41773, CVE-2021-42013). Scans URL lists, works with CGI and non-CGI, and automates exploitation.
Technical analysis and reproduction lab for the Apache HTTP Server 2.4.49 Path Traversal and RCE vulnerability.
Nmap NSE script to detect Apache HTTP Server path traversal vulnerability (CVE-2021-41773) by sending crafted requests and analyzing responses for file disclosure.
Nmap NSE script to detect Apache 2.4.49 path traversal vulnerability (CVE-2021-41773) by sending crafted requests and analyzing responses for exploitation.
Educational proof-of-concept for CVE-2021-41773, demonstrating path traversal to remote code execution on Apache HTTP Server 2.4.49 with a reverse shell payload.
mass_cve-2021-41773
Docker-based lab environment for practicing CVE-2021-41773 (Apache HTTP Server 2.4.49 path traversal and RCE) with step-by-step setup instructions for security training.
Python-based exploit scanner for CVE-2021-41773, allowing single-target or batch scanning to detect vulnerable Apache servers.
Python-based scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server 2.4.49 and 2.4.50.
Apache 2.4.49 Path Traversal Vulnerability Checker
Mitigation/fix of CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache
Exploit for Apache HTTP Server 2.4.49 path traversal and remote code execution vulnerability (CVE-2021-41773), enabling LFI and RCE on vulnerable servers.
MASS CVE-2021-41773
A powerful and reliable exploit tool for Apache HTTP Server vulnerabilities CVE-2021-41773 and CVE-2021-42013. This tool provides remote code execution capabilities on vulnerable Apache 2.4.49 and 2.4.50 servers.
Python-based proof-of-concept exploit for CVE-2021-41773, enabling remote code execution on Apache 2.4.49 servers with custom command and port options.
CVE-2021-41773 | Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks
PoC for CVE-2021-41773 with docker to demonstrate
CTF_WRITEUPS/TryHackMe /CVE-2021-41773/
A framework for bug hunting or pentesting targeting websites that have CVE-2021-41773 Vulnerability in public
Some docker images to play with CVE-2021-41773 and CVE-2021-42013
This Metasploit module exploits an unauthenticated remote code execution vulnerability which exists in Apache version 2.4.49 (CVE-2021-41773). If files outside of the document root are not protected by ‘require all denied’ and CGI has been explicitly enabled, it can be used to execute arbitrary commands. This vulnerability has been reintroduced in the Apache 2.4.50 fix (CVE-2021-42013).
Proof-of-concept scanner for Apache HTTP Server path traversal (CVE-2021-41773) with multi-host support, SSL verification toggle, and concurrent scanning.
Apache (Linux) CVE-2021-41773/2021-42013 Mass Vulnerability Checker
Docker-based lab for Apache CVE-2021-41773 path traversal and RCE exploitation with Python exploit script, demonstrating vulnerability analysis and mitigation strategies.
Proof-of-concept exploit for Apache HTTP Server path traversal vulnerability CVE-2021-41773, with Docker setup and detailed vulnerability analysis.
Fixed shell exploit for Apache HTTP Server 2.4.49 CVE-2021-41773 path traversal and remote code execution vulnerability. Reads arbitrary files and executes commands on vulnerable targets.
Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal vulnerability (CVE-2021-41773) with Docker setup and multiple exploitation methods for file disclosure.
Simple script realizado en bash, para revisión de múltiples hosts para CVE-2021-41773 (Apache)
Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution
Prueba de concepto de CVE-2021-41773
Detailed writeup of CVE-2021-41773 Apache path traversal and RCE exploitation, with step-by-step commands and root cause analysis from a TryHackMe lab environment.
Recreation and analysis of a curious logic error in Apache 2.4.49 that escalated to remote code execution
Educational proof-of-concept environment for CVE-2021-41773 path traversal in Apache HTTP Server 2.4.49, with Docker-based setup for testing and validation.
Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal (CVE-2021-41773) enabling file read and remote code execution via CGI.
Educational FastAPI lab demonstrating CVE-2021-41773 directory traversal and local file inclusion, with a vulnerable server, patched code, and encoded payload examples for local security training.
Docker-based lab environment for CVE-2021-41773 (Apache HTTP Server 2.4.49) path traversal and RCE exploitation with step-by-step setup instructions.
PoC exploit script for Apache HTTP Server 2.4.49 path traversal and file disclosure vulnerability (CVE-2021-41773). Supports single IP, file list, and subnet scanning.
Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE
The first vulnerability with the CVE identifier CVE-2021-41773 is a path traversal flaw that exists in Apache HTTP Server 2.4.49.
PoC and exploit for CVE-2021-41773 path traversal in Apache HTTP Server 2.4.49, with Docker setup and curl-based exploitation commands for file disclosure and testing.
Hands-on lab to exploit Apache 2.4.49 path traversal (CVE-2021-41773) using Docker, Nmap scanning, and curl to retrieve a flag.
Bash POC script for RCE vulnerability in Apache 2.4.49
Educational Docker-based lab demonstrating CVE-2021-41773 path traversal exploit against Apache httpd 2.4.49, with curl-based exploitation commands.
Multi-language exploit and detection scripts for CVE-2021-41773, enabling remote code execution and local file disclosure on vulnerable Apache servers.
Proof-of-concept exploit for CVE-2021-41773, enabling remote code execution and CGI-bin path traversal on Apache HTTP Server 2.4.49. Includes Docker-based vulnerable environment setup and automated exploitation script.
Exploit script for Apache HTTP Server 2.4.49/2.4.50 path traversal and remote code execution (CVE-2021-41773). Includes Docker-based reproduction environment and detailed explanation of the double URL-encoding bypass technique.
Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal (CVE-2021-41773) with Docker-based lab environment and patch diff analysis.
Proof-of-concept exploit for CVE-2021-41773, demonstrating path traversal and remote code execution on Apache HTTP Server 2.4.49 with a reverse shell payload.
Proof-of-concept exploit for Apache HTTP Server 2.4.49/2.4.50 path traversal vulnerability (CVE-2021-41773) enabling remote code execution via CGI scripts. Includes Docker-based reproduction environment and Python exploit script.
Python script that uses Shodan to discover Apache HTTP Server 2.4.49 instances vulnerable to CVE-2021-41773 path traversal and file disclosure.
Remote Code Execution exploit for Apache servers. Affected versions: Apache 2.4.49, Apache 2.4.50
Documented CVE-2021-41773 (Apache HTTP Server path traversal, CVSS 9.8) — produced CVSS breakdown, impact assessment, and a mitigation plan (patch to 2.4.51+, CGI disable, firewall) and published the analysis on GitHub.
CVE-2021-41773
Exploit CVE-2021-41773 and CVE-2021-42013
Apache HTTPd (2.4.49) – Local File Disclosure (LFI)
Path Traversal vulnerability in Apache 2.4.49
Ce programme permet de détecter une faille RCE sur les serveurs Apache 2.4.49 et Apache 2.4.50
Python script to exploit CVE-2021-41773, a path traversal vulnerability in Apache 2.4.49, allowing file disclosure and remote code execution.
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.
Simple proof-of-concept exploit script for Apache HTTP Server path traversal vulnerability CVE-2021-41773, targeting version 2.4.49 to read arbitrary files.
Python exploit for Apache HTTP Server path traversal (CVE-2021-41773 & CVE-2021-42013) enabling LFI and RCE via CGI. For authorized security testing and research.
Python exploit script for CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49, enabling automated checking and exploitation.
CVE-2021-41773 vulnerable apache version 2.4.49 lab set-up.
Docker-based lab for reproducing CVE-2021-41773 (Apache HTTP Server 2.4.49) through controlled path traversal and file disclosure using a custom Python PoC.
Exploit scripts for Apache HTTP Server 2.4.49 directory traversal vulnerability (CVE-2021-41773), enabling path traversal and potential RCE via crafted HTTP requests.
On the 11/11/21 the apache 2.4.49-2.4.50 remote command execution POC has been published online and this is a loader so that you can mass exploit servers using this.
A simple Python proof-of-concept tool to check for Apache path traversal vulnerability (CVE-2021-41773). Detects vulnerable server versions and verifies exploitation by probing sensitive files. Built for learning CVE analysis, not mass exploitation.
CVE-2021-41773.nse
Python exploit for Apache HTTP Server 2.4.49 path traversal and remote code execution (CVE-2021-41773), enabling LFI and RCE on vulnerable servers.
Poc CVE-2021-41773 - Apache 2.4.49 with CGI enabled
PoC and analysis of CVE-2021-41773
Cybersecurity lab demonstrating Apache CVE-2021-41773 path traversal vulnerability with vulnerable server simulation, scanner, and security reporting.
CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited
Docker container lab to play/learn with CVE-2021-41773
In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE).
A automatic scanner to apache 2.4.49
CVE-2021-41773, poc, exploit
CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49.
Dockerized proof-of-concept for Apache HTTP Server path traversal and RCE (CVE-2021-41773), including build instructions and curl-based exploitation steps.
cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49
CVE-2021-41773&CVE-2021-42013图形化漏洞检测利用工具
Proof-of-concept scanner that checks hosts for CVE-2021-41773 Apache path traversal vulnerability, reporting vulnerable or not vulnerable status.
Fast python tool to test apache path traversal CVE-2021-41773 in a List of url
Apache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test.
Exploit for Apache 2.4.49
