Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-41773 — Exploit scripts for Apache HTTP Server 2.4.49 directory traversal vulnerability (CVE-2021-41773), enabling path traversal and potential RCE via crafted HTTP requests. | Kitploit
Tools/GitHubGitHub/skentagon/cve-2021-41773
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubskentagon/cve-2021-41773

CVE-2021-41773

Exploit scripts for Apache HTTP Server 2.4.49 directory traversal vulnerability (CVE-2021-41773), enabling path traversal and potential RCE via crafted HTTP requests.

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-41773

Usage

root@kitploit:~
docker-compose up -d --build vuln-server-no-cgid
python no-cgid/exploit.py
root@kitploit:~
docker-compose up -d --build vuln-server-cgid-sh
python cgid-sh/exploit.py

What is CVE-2021-41773?

CVE-2021-41773

Directory traversal vulnerability in Apache HTTP Server 2.4.49. Occurs when Require all denied is not set.

When a URL encoded with %2e is received, it allows access to parent directories. Example: GET /cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd

If CGI is enabled, RCE is possible.

Due to insufficient mitigation of this vulnerability, there is a vulnerability CVE-2021-42013 in Apache HTTP Server 2.4.50.

Download Tool