CVE-2024-38473

The repository contains a Python script that scans for multiple Apache HTTP Server vulnerabilities by sending crafted HTTP requests to detect potential misconfigurations or weaknesses. It does not include exploit code for achieving RCE or other offensive actions, only detection logic.

This repository contains a Nuclei template designed to detect Apache HTTP Server instances vulnerable to CVE-2024-38473, an ACL bypass vulnerability in mod_proxy. The template includes multiple HTTP requests to identify vulnerable configurations and potential protected files that could be bypassed.

This repository contains a functional Python script demonstrating an authentication bypass vulnerability in Apache HTTP Server's mod_proxy module via incorrect URL encoding. The PoC sends a crafted request with a maliciously encoded path to bypass authentication and access protected resources.