CVE-2024-40898 PoC — Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows

Description

This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations.  It initiates an SSL connection to the target server and sends a HEAD request.

Readme

# CVE-2024-40898
This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations.  It initiates an SSL connection to the target server and sends a HEAD request.

It initiates an SSL connection to the target server and sends a HEAD request. If the response suggests that SSL certificate verification is improperly handled, the server might be vulnerable.

🚀 Features
✅ Supports full URLs or plain IPs with optional ports

✅ Automatically parses and defaults to port 443 if not specified

✅ Ignores SSL certificate errors (for test purposes)

✅ Minimal and fast detection logic

✅ Clear output indicating possible vulnerability

🛠 Usage
python CVE-2024-40898.py -u https://192.168.1.1:443
You can also just pass an IP:

python CVE-2024-40898.py -u 192.168.1.1
⚠️ Disclaimer
This script is for educational and authorized security testing only. Do not use on systems you do not own or have explicit permission to test.

File Snapshot

Remarks