sudo0xksh/cve-2021-41773-checkerA simple Python proof-of-concept tool to check for Apache path traversal vulnerability (CVE-2021-41773). Detects vulnerable server versions and verifies exploitation by probing sensitive files. Built for learning CVE analysis, not mass exploitation.
CVE-2021-41773 Checker is a Python-based CLI tool that checks whether a target web server is vulnerable to the Apache path traversal vulnerability affecting Apache HTTP Server 2.4.49.
It is designed as a learning-focused proof of concept for understanding how CVEs are identified and validated.
CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server version 2.4.49 that allows attackers to access files outside the web root under specific configurations.
This tool performs a basic check by:
/etc/passwd disclosureThe tool sends an HTTP request to the target URL and reads the Server
response header.
If the server reports Apache version 2.4.49:
If the version does not match, the scan exits early.
Run the checker exactly like this
python cve_check.py
Example
python cve_check.py http://example.com
The tool will automatically perform version checking and vulnerability probing.
The tool reports:
Possible results include:
Install dependencies if needed
pip install requests
Understanding CVEs means understanding both versioning and exploitation logic.
This tool helps connect those two pieces in a simple and practical way.