来源

关联漏洞

描述

Exploit for path transversal vulnerability in apache

介绍

# Exploit for Apache2

Exploit for path transversal vulnerability in apache.

Version: 2.4.49
CVE: CVE-2021-41773

# Pull docker image
```
docker pull httpd:2.4.49-alpine
```

# Configure apache

In */usr/local/apache2/conf/httpd.conf* replace these entries
```
 <Directory />
     AllowOverride none
-    Require all denied
+    #Require all denied
 </Directory>
```

```
<IfModule mpm_prefork_module>
-       #LoadModule cgi_module modules/mod_cgi.so
+       LoadModule cgi_module modules/mod_cgi.so
</IfModule>
```

# Install dependencies 

```
Bundle install
```

# Execute exploit

```
ruby expoit.rb -t http://localhost 
```

文件快照

 [4.0K]  /data/pocs/d9a66e76a886e9d45c490615c1c2fdb530953c49
├── [ 836]  exploit.rb
├── [  13]  Gemfile
├── [ 235]  Gemfile.lock
└── [ 630]  README.md

0 directories, 4 files

备注