150 matches found
Ghostcat-CNVD-2020-10487
Ghostcat exp for CNVD-2020-10487CVE-2020-1938 tomcat ajpå议任ęå±ę§č®¾ē½®åƼč“ēę件čÆ»ååę件ę§č”ć ę¼ę“åę 代ē ä» ä¾å®å ØęµčÆļ¼čÆ·åæēØäŗéę³ēØé,é ęēåęä½æēØč č“č“£äøę¬äŗŗę å ³ļ¼ļ¼ļ¼ python3 ajpShooter.py -h /\ / \ | | | //\ | | ' \ \ | ' \ / \ / | / \ '| / | | | | \ \ | | | | | || / | / // | ./ /| ||/ / \|| |/|| 00theway,just for test usage:...
cve-2020-1938
This repository does not have a README...
ghostcat-verification
Ghostcat verification CVE-2020-1938 Summary A new exploit called Ghostcat has been found CVE-2020-1938, see the articles on snyk and tenable for details and analysis of the exploit itself. In my case, I wanted to verify which Tomcat servers are exploitable and if so how does it manifest itself. S...
CVE-2020-1938
CVE-2020-1938 Scanner for CVE-2020-1938 Scanner? PoC? Call it whatever you want. Just run it directly in a Python environment. Just enter the IP address as prompted. It is recommended to use it after Tomcat is set up. Scanner is a revised script that adds support for multiple IP address inputs an...
CVE-2020-1938
This repository does not have a README...
tomcatfileread
CVE-2020-1938 Tomcat File Read / File Include Ghostcat ā python3 CVE-2020-1938 CNVD-2020-10487 Tomcat AJP protocol file read / file include vulnerability exploit POC python3 port. Original python2 author: ydhcui ā https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi Usage python3...
Hacking-Vulnerability-CVE-2020-1938-Ghostcat
Hacking-Vulnerability-case-study-presentations-...
tomcat-cve-2020-1938-check
tomcat-cve-2020-1938-check...
Ghostcat-Tomcat-AJP-Exploit-Py3
Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerability Detection Tool Introduction This project provides a Python verification script for verifying the Apache Tomcat AJP protocol local file inclusion vulnerability commonly known as Ghostcat, CVE-2020-1938 / CNVD-2020-10487. This script is ...
CVE-2020-1938-Clean-Version
CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat clean and readable code version Me...
CVE-2020-1938
cve-2020-1938 1.read fileļ¼ python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...
CVE-2020-1938_Ghostcat-PoC
CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. š Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...
CVE-2020-1938
This repository does not have a README...
CNVD-2020-10487-Bulk-verification
CNVD-2020-10487 CVE-2020-1938 Batch Verification Script Batch script, based on the POC file by @YDHCUI, supports batching and automatic screenshots for easy review. 1. Environment Preparation Use conda to install virtual environments search Baidu for miniconda installation. Since the POC uses...
CVE-2020-1938
This repository does not have a README...
CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis
CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...
GhostCat-LFI-exp
GhostCat-LFI-exp CVE-2020-1938 Original EXP: https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi Only modified one place, can include execute arbitrary files under any project...
CNVD-2020-10487
Description The tool is intended for security research and internal audits only. It is forbidden to use it to launch illegal attacks. The user is responsible for any consequences. Apache Tomcat file inclusion vulnerability CVE-2020-1938 / CNVD-2020-1048 batch detection tool. This project is...
CVE-2020-1938TomcatAjpScanner
CVE-2020-1938TomcatAjpScanner Batch scan for Tomcat AJP vulnerability Vulnerability Details On January 6, 2020, the National Information Security Vulnerability Sharing Platform CNVD included the Apache Tomcat file inclusion vulnerability CNVD-2020-10487, corresponding to CVE-2020-1938. Attackers...
CVE-2020-1938-Exploitation
CVE-2020-1938 Exploitation Apache Tomcat arbitrary JSP upload leading to RCE Description CVE-2020-1938 is a critical vulnerability which impacts Apache Tomcat from 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 ā ļø This was exploited in a Hack The Box lab. š Reference: NIST NVD Entry...