CVE-2021-41773 — Exploit script for CVE-2021-41773 (Apache Path Traversal) with Docker setup and multi-target scanning via URL or list. | Kitploit

CVE-2021-41773

Docker

$ sudo docker build -t <image_name> .
$ sudo docker run -d -t -p 80:80 --name <container_name> <image_name> /bin/bash
$ sudo docker exec -it <container_name> ./bin/apachectl -k restart

To access docker container for custom config file

$ docker exec -it <container> /bin/bash
file config in /usr/local/apache2/conf/httpd.conf
after config run command

$ /usr/local/apache2/bin ./apachectl -k restart

Usage Script

[+] python ./exploit.py [-OPTIONS] [Target/List of Targets]

[+] -h : help

[+] -url <target>: specifict the target to check 

[+] -list <filename>: Scan multiple targets

Example

-h: help

-url: url

-list: path to file