🚀 Overview

This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other tools fail.

⚡ Features 🔧 Multiple Payload Support: Tests various exploitation paths and techniques

💻 Interactive Shell: Full interactive command execution with auto-completion

🔄 Auto Reverse Shell: Automatic reverse shell generation with multiple payload types

🔍 System Reconnaissance: Quick system information gathering and enumeration

🚀 Curl Backend: Bypasses URL encoding limitations that break other tools

🖥️ Cross-Platform: Works on Linux, Windows, and macOS

📦 No Dependencies: Uses only built-in Python libraries and system tools

🎯 Smart Detection: Automatically detects Apache version and vulnerability status

🎯 Vulnerabilities

CVE-2021-41773

Affected Versions: Apache 2.4.49

Description: Path traversal vulnerability allowing access to files outside web root

CVSS Score: 7.5 (High)

Impact: Information disclosure, limited file access

CVE-2021-42013

    Affected Versions: Apache 2.4.50

    Description: Remote Code Execution vulnerability when CGI is enabled

    CVSS Score: 9.8 (Critical)

    Impact: Full system compromise, arbitrary command execution