CVE-2021-41773
Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773 (by thehackersbrain)
CVE-2021-38647
CVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD (by AlteredSecurity)
CVE-2021-41773 | CVE-2021-38647 | |
---|---|---|
1 | 1 | |
83 | 67 | |
- | - | |
2.6 | 1.8 | |
about 2 years ago | over 2 years ago | |
Python | PowerShell | |
- | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CVE-2021-41773
Posts with mentions or reviews of CVE-2021-41773.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-04-07.
-
Oh My WebServer TryHackMe Machine Writeup and Walkthrough
After studing, what was the flaw a written a custom exploit for this specific CVE which will give us RCE on the server, you can find that exploit here.
CVE-2021-38647
Posts with mentions or reviews of CVE-2021-38647.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-04-07.
-
Oh My WebServer TryHackMe Machine Writeup and Walkthrough
After enumerating the host machine's services for a while, found that WinRM service, commonly on ports 5985, 5986 is vulnerable with the CVE-2021-38647, exploit can be found here. This exploit is against the OHMIGOD service, commonly runnnig on ports as 5986
What are some alternatives?
When comparing CVE-2021-41773 and CVE-2021-38647 you can also consider the following projects:
pwn_jenkins - Notes about attacking Jenkins servers
pwntools - CTF framework and exploit development library
AutoSploit - Automated Mass Exploiter