Add PoC exploit for CVE-2021-42013 - Githubissues

ronin-rb / community-pocs

A repository of PoCs for ronin-exploits

https://ronin-rb.dev

GNU General Public License v3.0

0 stars 2 forks source link

Add PoC exploit for CVE-2021-42013 #20

Open postmodern opened 5 months ago

postmodern commented 5 months ago

Add a PoC exploit for CVE-2021-42013, a path traversal vulnerability in Apache HTTP Server <= 2.4.50 could lead to arbitrary command execution.

Reference PoCs

https://github.com/BassoNicolas/CVE-2021-42013
https://github.com/0xGabe/Apache-CVEs
https://github.com/12345qwert123456/CVE-2021-42013 (shows how to repro using curl)
https://gitlab.com/checkscale-gitlab/cve-2021-41773 (also contains Dockerfiles)

Vuln App

https://github.com/vulhub/vulhub/tree/639e32be6c0425b11d7d56594761c5e599a6a9d5/httpd/CVE-2021-42013
https://github.com/12345qwert123456/CVE-2021-42013 (contains pre-configured Dockerfiles)

How to Submit a PoC

See the CONTRIBUTING file for instructions on how to submit a PoC exploit.