Apache HTTP Server 2.4.49 - Path Traversal & RCE (CVE-2021-41773)

A sophisticated Python-based proof-of-concept (PoC) exploit for CVE-2021-41773. This tool automates the process of testing Apache 2.4.49 servers for path traversal and remote code execution (RCE) vulnerabilities.

⚠️ Legal Disclaimer

This tool is for educational purposes only and for use in authorized security auditing and penetration testing. Accessing or attempting to exploit target systems without explicit prior permission is illegal and unethical. The developer assumes no liability for misuse or damage caused by this program.

📖 Background

In Apache HTTP Server 2.4.49, a flaw was found in the way path normalization was performed. An attacker could use a path traversal attack to map URLs to files outside the expected document root. If files outside of the document root are not protected by "require all denied" and CGI scripts are enabled (such as mod_cgi), this can lead to Remote Code Execution (RCE).

Vulnerability Mechanics

Path Traversal: Exploits the lack of proper validation for encoded characters.
RCE: By traversing to /bin/sh and sending a POST request with a specific payload, an attacker can execute arbitrary system commands.

🚀 Features

Dynamic Command Execution: Interactive shell-like interface for executing commands on the target.
Bypass Logic: Implements double-percent encoding to evade basic signature-based security filters.
Robust Connection Handling: - Prevents automatic URL normalization by the requests library.
- Disables SSL verification for testing legacy systems.
- Follows/Blocks redirects intelligently to avoid "Dead Host" resolution errors.
Error Diagnostics: Clean, user-friendly error messages for Timeouts, 403 Forbidden, and 404 Not Found status codes.

🛠️ Installation

Clone the Repository:

git clone [https://github.com/im2nerd/CVE-2021-41773.git](https://github.com/your-username/CVE-2021-41773.git)
cd CVE-2021-41773

Install Dependencies
```
pip install requests colorama urllib3
```

CVE-2021-41773