vanshuk-bhagat/apache-http-server-vulnerabilities-cve-2021-41773-and-cve-2021-42013In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE).
Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013
In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE). The assessment included:
Reconnaissance: Using tools like Nmap and Gobuster for network discovery and service enumeration. Manual Exploitation Testing: Evaluating vulnerability exposure through tailored scripts and analysis. Automated Exploitation: Leveraging Metasploit modules for vulnerability exploitation attempts. Creative Problem-Solving: Applying logic and decoding techniques to uncover hidden clues and access WordPress admin credentials. 🔑 Key Achievement: The investigation confirmed the absence of exploitability for the Apache vulnerabilities but successfully unveiled a WordPress admin panel access by solving challenges using detailed enumeration and creative analysis.
This project highlights the importance of a meticulous approach in ethical hacking and cybersecurity assessments, showcasing a comprehensive testing methodology.
