Course
In this challenge, we explore the vulnerability CVE-2021-41773, specific to Apache Httpd 2.4.49, which allows reading local files and executing commands if CGIs are enabled. We will exploit this issue via Server-Side Request Forgery (SSRF) to gain code execution.
Skills covered
Injection
Network
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.