{"uuid": "7bf3b880-3957-4122-a58f-d07d121d8575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41773", "type": "seen", "source": "https://t.me/hacking_Attack/29553", "content": "KitPloit - PenTest Tools!\nScarce-Apache2 - A Framework For Bug Hunting Or Pentesting Targeting Websites That Have CVE-2021-41773 Vulnerability In Public\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEhRWcdl04xGOBLlM_g9DzCMsFGGCPy3N36bwNXfArCm8SpaUroy9Mz1Hbu3C1TRfKxBxybgzs-SqbGIEGrRNmRVNsBKR6Q-xz_FidYUIKelwx0WxxGHbUKwuaAxqxbEllP6n3ltZ9GEJ5YooEJjV_t9qXahy8rxhXsfZdsm13xnvEsqubv2pKrmpz_ZTQ=w640-h330 This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method (Only if the MOD_CGI is Enabled at the targeted webserver). This tool works with the provided Single target or Mass Target from a file list. Only use this tool for Bug Hunting/ Pentesting Purposes. https://blogger.googleusercontent.com/img/a/AVvXsEhcRO_Dx6ScPy-zCqhbv9ZsB2Y5EC8Fo6FWrpWx7sC6H81feJvY1pb5uzirFi7KR2oxTamEqKPWFhxXCSe1KxDJRM7o_OPtZ0E_opEOIPdRH5-K7CLTLOPqYl8AVpIYyPIVzHN2y0b-oX3qT8PJHymUb-zEDweKomCW-IrxvpHMUWYDhxdLHAhrbYyhRg=w640-h316 https://blogger.googleusercontent.com/img/a/AVvXsEibLpxQqYUk-e42cAQqZ79qpvIPld94BKnn9nRm5UKHJHHzCrxMmSyMaEe6e5oqhtxC1eNWqnS_fVBYSzclUT22R3QBDK-dVg6xZmz_UNeVjr8xPea5WH1k8ewTWW1cOFovZuFQKAI3eMTGsaEzRgRzc5Y-Zps4nILNgDM7M8lXAq_dR8u-VQ14vRnw4w=w640-h316 https://blogger.googleusercontent.com/img/a/AVvXsEgITNTPLGq-_s81ClmEAdJnpep5lS-i7ge88cEABBssuGeWiMh_sGZKgZdfBjaSBtF28FxHMTgOgdYMX41-cRlbCm9fsupSbxh9IpupmTp8sfqoEJrktxbd5YYiIb9wjULUrKMQ24wVyYOMXEdo5voYEA9DjZ10AtWjOsnZGvMJj5h9sgKsomPSldh1xw=w640-h330 Installation- git clone https://github.com/HightechSec/scarce-apache2\n- cd scarce-apache2\n- bash scarce.sh or you can install in your system like this - git clone https://github.com/HightechSec/scarce-apache2\n- cd scarce-apache2\n- sudo cp scarce.sh /usr/bin/scarce && sudo chmod +x /usr/bin/scarce\n- $ scarce Usage* Menu's \n* Menu 1is for scanning LFI Vulnerability from a provided file that contains the list of the target urlor a provided single target url.\n* Menu 2is for scanning RCE Vulnerability from a provided file that contains the list of the target urlor a provided single target url.\n* Menu 3is for Executing RCE from a provided single target url. This will work for the Maybe VulnResults or sometimes with a 500 Error Response.\n\n* URL Format \n* Use http://like http://example.comor https://like https://example.comfor the url formatting at Single Target usages\n* For Url or IP that has been provided from a List, Don't Use the URL Formatting like eg: \n* https://target.com\n* http://hackerone.com\n* https://bugcrowd.com Requirements* curl\n* bash\n* git CreditsThanks to:\n\n* CVE-2021-41773 Reproduced by @ptswarm\n* Executing RCE in CVE-2021-41773 by @hackerfantastic\n* Removing 5xx Error when Running RCE by @lukejahnke Download Scarce-Apache2\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:10.923477Z"}