Apache Path Traversal Exploit (CVE-2021-41773)

Apache Path Traversal + RCE — CVE-2021-41773 / CVE-2021-42013

Pieza of exploitation complete for the vulnerability of path traversal in Apache HTTP Server that afecta a the versions 2.4.49 and 2.4.50.

n
• Script Python — Automatiza the detection and exploitation. Soporta lectura of files arbitrarios (/etc/passwd, /etc/shadow with permisos).
n
• Modo RCE — Si mod_cgi or mod_cgid are enableds, executes commands of the system directly via path traversal + CGI abuse.
n
• Bypass of the parche incomplete — Includes the variante CVE-2021-42013 that bypasea the fix original of Apache.
n
• Wordlist of files sensibles — Lista curated of 200+ files a extract on Linux/Windows a vez consignsda the vuln.
n

Dificultad: Beginner-friendly. El exploit es deterministic, no probabilistic.