CVE-2021-41773 PoC — Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Source

Associated Vulnerability

Description

In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE).

Readme

**Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013**

In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE).
The assessment included:

Reconnaissance: Using tools like Nmap and Gobuster for network discovery and service enumeration.
Manual Exploitation Testing: Evaluating vulnerability exposure through tailored scripts and analysis.
Automated Exploitation: Leveraging Metasploit modules for vulnerability exploitation attempts.
Creative Problem-Solving: Applying logic and decoding techniques to uncover hidden clues and access WordPress admin credentials.
🔑 Key Achievement: The investigation confirmed the absence of exploitability for the Apache vulnerabilities but successfully unveiled a WordPress admin panel access by solving challenges using detailed enumeration and creative analysis.

This project highlights the importance of a meticulous approach in ethical hacking and cybersecurity assessments, showcasing a comprehensive testing methodology.

File Snapshot

 [4.0K]  /data/pocs/f725cd8bf3f7cfd3a0557fe39dbcc4b5b1e930d1
├── [1.2K]  README.md
└── [3.2M]  Reconnaissance and Exploitation_ Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013.docx - Google Docs.pdf

0 directories, 2 files

Remarks