Some docker images to play with CVE-2021-41773 and CVE-2021-42013
run docker compose up -d to spin up all the containers.
Servers will run on ports 8080, 8081, 8082, and 8083.
- 8080 contains an Apache 2.4.49 with CGI disabled.
- 8081 contains an Apache 2.4.49 with CGI enabled.
- 8082 contains an Apache 2.4.50 with CGI disabled.
- 8083 contains an Apache 2.4.50 with CGI enabled.
There are some flags on each server at /flag.txt See if you can grab them :)
There is a special flag hidden on the server on 8083 which requires a reverse shell (in principle)