来源

关联漏洞

描述

In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE).

介绍

**Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013**

In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal and Remote Code Execution (RCE).
The assessment included:

Reconnaissance: Using tools like Nmap and Gobuster for network discovery and service enumeration.
Manual Exploitation Testing: Evaluating vulnerability exposure through tailored scripts and analysis.
Automated Exploitation: Leveraging Metasploit modules for vulnerability exploitation attempts.
Creative Problem-Solving: Applying logic and decoding techniques to uncover hidden clues and access WordPress admin credentials.
🔑 Key Achievement: The investigation confirmed the absence of exploitability for the Apache vulnerabilities but successfully unveiled a WordPress admin panel access by solving challenges using detailed enumeration and creative analysis.

This project highlights the importance of a meticulous approach in ethical hacking and cybersecurity assessments, showcasing a comprehensive testing methodology.

文件快照

 [4.0K]  /data/pocs/f725cd8bf3f7cfd3a0557fe39dbcc4b5b1e930d1
├── [1.2K]  README.md
└── [3.2M]  Reconnaissance and Exploitation_ Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013.docx - Google Docs.pdf

0 directories, 2 files

备注