CVE-2024-38475

exploit CVE-2024-38475(mod_rewrite weakness with filesystem path matching)

This repository contains a Python script for testing web server vulnerabilities, specifically targeting Apache servers. The script checks for potential issues (mod_rewrite weakness with filesystem path matching) to exposed source code using wordlists for directories and files and applies various payloads.

Usage: To run the script, use the following command:

python3 script.py --webroots webroots.txt --url 127.0.0.1 --schema http --directory_wordlist raft-medium-directories.txt --file_wordlist raft-medium-files.txt

Inspired by:

1. https://github.com/mrmtwoj/apache-vulnerability-testing
2. https://github.com/p0in7s/CVE-2024-38475