Apache CVE-2021-41773 Security Lab

A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773, a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49.

📌 Project Overview

This project creates an isolated Docker-based environment running Apache HTTP Server 2.4.49 and provides a Python proof-of-concept for understanding the vulnerability.

The objective of the project is educational: to understand how a vulnerable Apache configuration can be tested in a controlled environment and how security researchers can reproduce and analyze a known vulnerability.

🛠️ Technologies Used

• Python
• Docker
• Apache HTTP Server 2.4.49
• Linux / Ubuntu
• TCP/IP & HTTP
• Cybersecurity / Vulnerability Research

📂 Project Structure

.
├── Dockerfile
├── exploit.py
├── README.md
└── LICENSE

Dockerfile

Builds an isolated Ubuntu-based environment and compiles Apache HTTP Server 2.4.49 with the required modules.

exploit.py

Contains a Python proof-of-concept that sends a crafted HTTP request to the intentionally vulnerable lab environment.

🚀 Setup

1. Clone the repository

git clone https://github.com/YOUR-USERNAME/Apache-CVE-2021-41773-Security-Lab.git
cd Apache-CVE-2021-41773-Security-Lab

2. Build the Docker image

docker build -t apache-cve-2021-41773-lab .

3. Run the lab

docker run -d --name apache-cve-lab -p 8080:80 apache-cve-2021-41773-lab

4. Now test Apache

curl http://127.0.0.1:8080/

5. If you want to stop the lab

docker stop apache-cve-lab

6. And remove it

docker rm apache-cve-lab

7. Run the Python PoC

python exploit.py 127.0.0.1 8080 id

🎯 Learning Objectives

Through this project, I explored:

• Vulnerability reproduction in an isolated environment
• HTTP request construction
• Apache HTTP Server architecture
• Path traversal concepts
• CGI-based request handling
• Python socket programming
• Docker-based security labs
• Vulnerability analysis and responsible security testing

🔐 Responsible Use

This project is intended for authorized security research and educational purposes only.

The lab should only be executed against systems that you own or have explicit permission to test. Do not use the proof-of-concept against unauthorized systems.

👨‍💻 Internship Project

Developed during my cybersecurity internship at ITSOLERA PVT LTD.

This project contributed to my practical experience in vulnerability research, Linux, Docker, HTTP, and offensive security concepts.