ajpfuzzer

AJPFuzzer - A command-line fuzzer for AJPv1.3 AJPFuzzer is a rudimental fuzzer for the Apache JServ Protocol ajp13. Built on top of libajp13, the tool allows you to create and send AJP messages using an easy-to-use command line interface. AJPFuzzer can craft properly formatted AJP13 messages all...

CVE-2020-1938

CVE-2020-1938 Ce CVE-2020-1938 corrige les erreurs du PoC de https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git et a été validé sur Apache Tomcat/8.0.43. Procédure 1. Créer un fichier docker-compose.yml 2. docker compose up -d 3. python3 CVE-2020-1938.py -p 8009 -f...

CVE-2020-1938TomcatAjpScanner

CVE-2020-1938TomcatAjpScanner Массовое сканирование уязвимости Tomcat AJP Подробности уязвимости 6 января 2020 года Национальная платформа обмена информацией об уязвимостях информационной безопасности CNVD включила в свой каталог уязвимость включения файлов Apache Tomcat CNVD-2020-10487,...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Scan multithreadé Python2 de la vulnérabilité de lecture de fichier du protocole Tomcat-Ajp Avantage pour ceux qui chassent les points SRC Le POC provient de https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, l'auteur du POC n'est pas moi !!!! Opérations 1. Mettez les domaines/IP à scanne...

CVE-2020-1938

CVE-2020-1938 Инструмент предназначен только для исследований в области безопасности и внутренних проверок. Запрещается использовать инструмент для незаконных атак. Ответственность за последствия несёт пользователь. apache-tomcat-8.5.32.zip — тестовый tomcat Произвольное чтение файлов...

CVE-2020-1938

CVE-2020-1938-tomcat-скачивание-файлов+включение-файлов Уязвимость чтения файлов по протоколу Tomcat-Ajp】 Источник оригинального PoC: https://github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC/blob/master/poc.py После модификации можно включать файлы, а при определённых условиях — выполнять...

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

Ghostcat-CNVD-2020-10487

Ghostcat exp for CNVD-2020-10487CVE-2020-1938 File reading and file execution caused by arbitrary attribute setting in the Tomcat AJP protocol. Vulnerability Analysis The code is for security testing only. Do not use it for illegal purposes. The user is responsible for any consequences, and I am...

Ghostcat-Tomcat-AJP-Exploit-Py3

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Инструмент для обнаружения уязвимости Введение Этот проект предоставляет скрипт на Python для проверки уязвимости локального включения файлов протокола AJP Apache Tomcat известной как Ghostcat, CVE-2020-1938 / CNVD-2020-10487. Этот скрипт был...

GhostCat-LFI-exp

GhostCat-LFI-exp CVE-2020-1938 EXP originale: https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi È stata modificata solo una parte: ora può includere localmente eseguire qualsiasi file in qualsiasi progetto...

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CVE-2020-1938 Analisi di Tomcat AJP Ghostcat Questo repository contiene un report di analisi in Markdown per CVE-2020-1938 Ghostcat e le risorse immagine utilizzate nel report. Contenuti Report: docs/report/CVE-2020-1938-Analysis-Report.md Immagini: docs/images Ambito del Report Il report è...

CVE-2020-1938-Tool

CVE-2020-1938-Tool Ringrazio innanzitutto hypn0s per lo strumento di costruzione di richieste del protocollo AJP AJPY una libreria Python, sulla base del quale questo progetto implementa il rilevamento in batch dei siti vulnerabili a GhostCat. Utilizzo Al momento sono disponibili due funzionalità...

CVE-Apache-Ecosystem

Apache Ecosystem CVE Vulnerability Reproduction Testbed D...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

UBUNTU-CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

EUVD-2026-55981

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

RHEL 8 : httpd:2.4 (RHSA-2026:36373)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36373 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Apache HTTP...