Sploitus

Exploit for CVE-2021-41773

kitploit ยท 2026-08-27

Exploit Code

MARKDOWN20 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LAYARKACASIBER-CVE-2021-41773
# CVE-2021-41773 - Apache HTTP Server 2.4.49

# CVE-2021-41773-Path Traversal ๋žฉ ์‹คํ–‰ ๋ฐฉ๋ฒ•

  1. PC/๋…ธํŠธ๋ถ์— Docker๋ฅผ ์„ค์น˜ํ•˜๊ณ  ์‹คํ–‰ํ•˜์„ธ์š”
  2. ์ด github ์ €์žฅ์†Œ๋ฅผ ํด๋ก ํ•˜์„ธ์š”
  3. Path Traversal ํด๋”๋กœ ์ด๋™ํ•˜์„ธ์š”
  4. ๋‹ค์Œ ๋ช…๋ น์„ ์ž…๋ ฅํ•˜์„ธ์š” `docker build -t cve-2021-41773-path-traversal .` ๋ฐ `docker run --rm -dit -p 8888:80 cve-2021-41773-path-traversal`
  5. ๋ธŒ๋ผ์šฐ์ €์—์„œ `http://localhost:8888`์— ์ ‘์†ํ•˜์„ธ์š”



# CVE-2021-41773-RCE ๋žฉ ์‹คํ–‰ ๋ฐฉ๋ฒ•

  1. PC/๋…ธํŠธ๋ถ์— Docker๋ฅผ ์„ค์น˜ํ•˜๊ณ  ์‹คํ–‰ํ•˜์„ธ์š”
  2. ์ด github ์ €์žฅ์†Œ๋ฅผ ํด๋ก ํ•˜์„ธ์š”
  3. RCE ํด๋”๋กœ ์ด๋™ํ•˜์„ธ์š”
  4. ๋‹ค์Œ ๋ช…๋ น์„ ์ž…๋ ฅํ•˜์„ธ์š” `docker build -t cve-2021-41773-rce .` ๋ฐ `docker run --rm -dit -p 9999:80 cve-2021-41773-rce`
  5. ๋ธŒ๋ผ์šฐ์ €์—์„œ `http://localhost:9999`์— ์ ‘์†ํ•˜์„ธ์š”