CVE-2021-41773 PoC — Apache HTTP Server 路径遍历漏洞

来源

关联漏洞

Description

A little demonstration of cve-2021-41773 on httpd docker containers

介绍

# CVE-2021-41773

A Demonstration to show the CVE-2021-41773 vulnerability on a docker container.

## Usage

### Server

- run build.sh(runs docker build)

```bash
./scripts/build.sh
```

> NOTE: No need to do it more than once

- run deploy.sh (creates a docker container with the image from `build.sh`)

```bash
./scripts/deploy.sh
```

to close the container run the following command:

```bash
 docker rm --force cve-2021-41773
```

### Demonstrating the exploit

#### using bash:

```bash
./scripts/exploit.sh
```

#### using postman:

- import the `CVE-2021-41773.postman_collection.json` collection to your postman and have fun.

文件快照

 [4.0K]  /data/pocs/0f602bb00bd3b6e8595d85192c55dba804da5502
├── [ 798]  CVE-2021-41773.postman_collection.json
├── [ 160]  Dockerfile
├── [ 20K]  httpd.conf
├── [ 11K]  LICENSE
├── [ 636]  README.md
└── [4.0K]  scripts
    ├── [  97]  build.sh
    ├── [ 182]  deploy.sh
    └── [ 151]  exploit.sh

1 directory, 8 files

备注