1833ravikumar-max/cve-2021-41773-apache-path-traversal-labDocker-based cybersecurity lab for studying and reproducing CVE-2021-41773 in an isolated environment.
A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773, a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49.
This project creates an isolated Docker-based environment running Apache HTTP Server 2.4.49 and provides a Python proof-of-concept for understanding the vulnerability.
The objective of the project is educational: to understand how a vulnerable Apache configuration can be tested in a controlled environment and how security researchers can reproduce and analyze a known vulnerability.
.
├── Dockerfile
├── exploit.py
├── README.md
└── LICENSE
Builds an isolated Ubuntu-based environment and compiles Apache HTTP Server 2.4.49 with the required modules.
Contains a Python proof-of-concept that sends a crafted HTTP request to the intentionally vulnerable lab environment.
git clone https://github.com/1833ravikumar-max/CVE-2021-41773-Apache-Path-Traversal-Lab.git
cd CVE-2021-41773-Apache-Path-Traversal-Lab
docker build -t apache-cve-2021-41773-lab .
docker run --rm -p 8080:8080 apache-cve-2021-41773-lab
python exploit.py 127.0.0.1 8080 id
Through this project, I explored:
This project is intended for authorized security research and educational purposes only.
The lab should only be executed against systems that you own or have explicit permission to test. Do not use the proof-of-concept against unauthorized systems.
Developed during my cybersecurity internship at ITSOLERA PVT LTD.
This project contributed to my practical experience in vulnerability research, Linux, Docker, HTTP, and offensive security concepts.