CVE-2024-38475

The repository contains a Python script that tests for multiple Apache HTTP Server vulnerabilities by sending crafted HTTP requests to detect potential misconfigurations or weaknesses. It does not include exploit code for achieving RCE or other offensive actions, but rather scans for vulnerable endpoints.

The repository contains a functional Python script that exploits CVE-2024-38475, an improper escaping vulnerability in Apache HTTP Server's mod_rewrite. The script scans for directories and files using crafted payloads to trigger source code disclosure or potential code execution.

The repository contains a Python script that scans for potential Apache mod_rewrite weaknesses by enumerating directories and files using wordlists and specific payloads. It checks for 403 responses for directories and 200 responses for files with crafted payloads, indicating potential source code disclosure vulnerabilities.

This repository contains a functional exploit framework for CVE-2024-38475, targeting directory traversal and source disclosure vulnerabilities. It includes a directory scanner to identify 403 endpoints and an exploiter module to test for file disclosure using crafted payloads.

This repository contains a functional Python-based PoC for CVE-2024-38475, a URL traversal vulnerability in Apache servers. The script automates TLS negotiation, directory scanning, and payload fuzzing to detect unauthorized file access.

This repository contains a bash script that scans for directories and files with 403 bypass payloads, likely targeting a directory traversal or path traversal vulnerability in CVE-2024-38475. It uses ffuf for fuzzing and does not include exploit code for achieving RCE or other offensive actions.