CVE-2021-42342

This PoC exploits CVE-2021-42342 in Goahead Webserver pre-5.1.5 by leveraging a flaw in the file upload filter that allows setting environment variables without the CGI_ prefix, leading to RCE via LD_PRELOAD. The exploit involves uploading a malicious shared object and triggering its execution.

This repository contains a functional exploit for CVE-2021-42342, targeting the Goahead webserver pre-5.1.5. The exploit leverages LD_PRELOAD to execute arbitrary code via a shared library, demonstrating both a simple 'Hello World' payload and a reverse shell.