Dockerized Apache mod_lua lab with a Python PoC reproducing the CVE-2021-44790 multipart boundary buffer overflow for local defensive testing and research.
This repository contains a small local lab and proof-of-concept tooling for reproducing the Apache HTTP Server vulnerability tracked as CVE-2021-44790.
CVE-2021-44790 is a vulnerability in Apache HTTP Server 2.4.51/2.4.52 involving the mod_lua multipart request parser. A crafted multipart boundary can trigger a buffer overflow condition in the server when the boundary is processed by the Lua handler.
This lab is intended for learning, defensive testing, and controlled local reproduction in a non-production environment only.
CVE-2021-44790.py — Python PoC / exploit helper for testing the vulnerability against a target.cve-2021-44790-lab/ — Dockerized Apache + Lua lab environment reproducing the vulnerable behavior.
Dockerfilehttpd.conflua/upload.luaFrom the repository root:
docker build -t cve-2021-44790-lab ./cve-2021-44790-lab
docker run --rm -it -p 80:80 cve-2021-44790-lab
The lab exposes a simple upload endpoint at:
http://127.0.0.1/upload
The Apache configuration enables the vulnerable mod_lua handler and sets a large request body limit so multipart payloads can be sent to the server.
Run the Python script against the target:
python CVE-2021-44790.py --help
Example:
python CVE-2021-44790.py --url http://127.0.0.1/upload --boundary-size 9000 --payload-size 10000000
The script supports options for:
The material in this repository is provided for lawful security research, lab-based testing, and vulnerability education. The author and contributors are not responsible for misuse of the code or any destructive activity performed with it.