ghostcatch

ghostcatch Apache Tomcat の AJP コネクタを無効化して CVE-2020-1938 Ghostcat を修正する Python ツール！ 現在の対応バージョン: Python 2.7 必要条件: pip install progress 使用方法: python ghostCatch.py root@kitploit: -help 使用法を表示するフラグ 例: python ghostCatch.py -help -path パスを指定するフラグ 例: python ghostCatch.py -path /myPath システム全体で server.xml...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 Apache Tomcat AJP Ghostcat 취약점CVE-2020-1938을 위한 강력한 Python 익스플로잇 도구로, 침투 테스트 및 보안 연구를 위한 고급 기능을 제공합니다. 🔍 개요 Ghostcat 취약점CVE-2020-1938은 공격자가 AJPApache JServ Protocol 커넥터를 통해 취약한 Apache Tomcat 서버에 배포된 웹 애플리케이션에서 임의의 파일을 읽을 수 있게 합니다. 이 도구는 다음을 지원하여 익스플로잇 과정을...

ghostcat

Ghostcat - CVE-2020-1938 Exploit Tomcat에서 AJP 커넥터포트 8009를 통해 파일을 읽습니다. 사용법: python3 ghostcat.py 파일 """ Guardar el script cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF Dar permisos y ejecutar chmod +x ghostcat.py Leer tomcat-users.xml credenciales del Tomcat Manager python3...

CVE-2020-1938

CVE-2020-1938 检测规则 root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...

ghostcat-verification

Ghostcat 検証 CVE-2020-1938 概要 Ghostcat と呼ばれる新しいエクスプロイトが発見されました CVE-2020-1938。エクスプロイト自体の詳細と分析については、snyk と tenable の記事を参照してください。 私の場合、どの Tomcat サーバーが悪用可能で、もし可能ならそれがどのように現れるのかを検証したかったのです。そこで、この実験では Tomcat 7、8、9 を確認します。 前提条件 docker python git Tomcat 7 で CVE-2020-1938 を使用してファイルを読み取る TODO: Tomcat 7...

CVE-2019-20790

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:59+00:00| seen| https://t.me/hackingAttack/38673 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38673 2026-09-06 13:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38673 2026-09-07 01:00:14+00:00|...

EUVD-2022-1173

Malicious code in bioql PyPI...

EUVD-2022-4818

Malicious code in bioql PyPI...

EUVD-2022-4009

Malicious code in bioql PyPI...

EUVD-2022-4979

Malicious code in bioql PyPI...

K53254186: Apache Tomcat vulnerability CVE-2020-1938

Security Advisory Description When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they...

K73059510: Undertow vulnerabilities CVE-2019-10212 and CVE-2020-1745

Security Advisory Description CVE-2019-10212 A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files. CVE-2020-1745 A file inclusion vulnerability was found...

SUSE CVE-2009-0033

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

Improper Authorization in Undertoe

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a...

GHSA-GV2W-88HX-8M9R Improper Authorization in Undertoe

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a...

GHSA-PRFW-3QX6-G9XR Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow

It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOWENCODEDSLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files...

Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow

It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOWENCODEDSLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files...

Apache Tomcat Denial of Service via Malformed Request Headers

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

GHSA-5CW4-GGX9-36VG Apache Tomcat Denial of Service via Malformed Request Headers

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...

GHSA-JPQR-VH55-XQXF Apache Tomcat Buffer Over-Read

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajpprocesscallback in modjk, which allows remote attackers to read portions of sensitive memory...