CVE-2011-3368

This exploit leverages CVE-2011-3368, an SSRF vulnerability in Apache HTTP Server, to scan internal ports or retrieve resources from internal hosts by crafting malicious HTTP requests with the '@' character to bypass access controls.

This PoC exploits CVE-2011-3368, an SSRF vulnerability in Apache HTTP Server, allowing an attacker to scan internal ports or retrieve resources from internal hosts via crafted HTTP requests. The script sends requests with a malformed URL to bypass access controls and probe internal services.

This PoC exploits CVE-2011-3368, an HTTP reverse proxy vulnerability in Apache HTTP Server, allowing internal port scanning and resource retrieval via crafted HTTP requests. It sends requests to an Apache server to probe internal hosts and ports, leveraging the vulnerability to bypass access controls.

This Metasploit module scans for poorly configured Apache reverse proxy servers by attempting to bypass rewrite rules using an escape sequence and injected URI. It checks for vulnerability by comparing baseline and test status codes, flagging a 502 response as a potential bypass.