Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 58 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow I need exploits for an old apache 1.3 server on linux
EH-Net
May 19, 2013, 03:37:47 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: I need exploits for an old apache 1.3 server on linux  (Read 955 times)
0 Members and 1 Guest are viewing this topic.
phate867
Newbie
*
Offline Offline

Posts: 9


View Profile
« on: February 27, 2013, 10:03:22 AM »

Hello,
for study reasons I have to exploit an old apache webserver, version 1.3.
I first scanned with nessus and metasploit, but it seems the only relevant exploits (who allow me, for example, to open a remote shell) rely on isapi module which is for windows versions...can you help me out please?
Logged
H1t M0nk3y
Hero Member
*****
Offline Offline

Posts: 864



View Profile
« Reply #1 on: February 27, 2013, 10:10:03 AM »

Hey,

You can't just ask us this question and expect someone here to give you such an exploit... Penetration testing/ethical hacking requires lots of knowledge and skills that you can only acquire over time. You can't just go straight to running exploit agains't a web server...

However, if you try hard and post detail questions about something specific, you'll get a lot of help here. But not like this, especially on your first post...
Logged

OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
phate867
Newbie
*
Offline Offline

Posts: 9


View Profile
« Reply #2 on: March 11, 2013, 06:56:24 AM »

Yes you're right, unfortunately expoliting apache is just the first step of my research, indeed my objective is observing the system UNDER this attack.

Anyway I'm doing some researches and I'd like to apply the chunked-encoding vulnerability (CVE-2002-0392) who could allow me to open a remote shell.
For now I compiled an 1.3.0 version of apache on an ubuntu 12.04 system, anyway now I got my first question: according to this http://www.securityfocus.com/bid/5033 my ubuntu version is not in the target list...does that mean I have to install another version of linux or the exploit is still possible?

If it's for alsr and stack protection I can disable them.

If this exploit is still not possible could you point me to another apache vulnerability who could allow me to open a remote shell?
« Last Edit: March 11, 2013, 06:59:18 AM by phate867 » Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.057 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.