IMPORTANT:AttackDefense Labs is included with a Pentester Academy subscription! Upgrade Now to access over 1800+ Labs.
Already a Pentester Academy student? Your access will continue uninterrupted. Please use the same Google account to login here.
Not a Pentester Academy student? Try our Free Communitiy Labs
cve-2021 | Level: Easy | Total Lab Runs: 0 | Premium Lab |
The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows. The goal of this project is to provide a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards.
In mid 2021, a flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased paths, this could allow for remote code execution. This issue has been assigned a CVE identifier of CVE-2021-41773.
This issue was supposedly fixed in version Apache HTTP Server 2.4.50, but the fix was insufficient. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions. The CVE identifier for the partially fixed implementation was CVE-2021-42013.
In this lab environment, the user is going to get access to a Kali GUI instance. An Apache web server vulnerable to CVE-2021-42013 is accessible from the tools installed on the Kali machine at http://demo.ine.local.
Objective: Exploit path traversal vulnerability in the Apache web server to retrieve the system files. Also leverage the RCE vulnerability to locate and retrieve the flag from the target server.
The setup code is based on the following Github repository: https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-42013
This lab is dedicated to you! No other users are on this network :)
Once you start the lab, you will have access to a root terminal of a Kali instance
Your Kali has an interface with IP address 192.X.Y.Z. Run "ip addr" to know the values of X and Y.
The target server should be located at the IP address 192.X.Y.3. It can be accessed using the hostname demo.ine.local.
Do not attack the gateway located at IP address 192.X.Y.1
The following activities are strictly prohibited on this website unless otherwise explicitly stated as allowed in the mission statement:
- Using automated scanners
- Using brute force attacks
- Denial of Service attacks
- Attacking other student machines in challenges where you might achieve a shell on the vulnerable system
- Attacking the lab infrastructure
Users violating the above will be either temporarily or permanently banned from the website.
If you are unsure about an activity, then please contact support to confirm that it is allowed on our website.
Technical Support for this Lab:
There is a reason we provide unlimited lab time: you can take as much time as you need to solve a lab. However, we realize that sometimes hints might be necessary to keep you motivated!
We currently provide technical support limited to:
- Giving hints for a lab exercise
- In rare circumstances, if you have totally given up (NO!!!) then tell you how to solve it. This will be limited to sharing the solution video or lab report
- A lab exercise fails to load or has errors in it
If you need technical support, please email firstname.lastname@example.org clearly mention the name and link of the lab exercise and other essential details. The more descriptive you are, the faster we can help you. We will get back to you within 24 hours or less.
For adminitrative queries, billing, enterprise accounts etc. please email email@example.com