CNVD-2020-10487

説明 本ツールはセキュリティ研究および内部確認専用です。不正な攻撃に使用することは禁止されており、生じた結果は使用者が負うものとします。 Apache Tomcatファイルインクルード脆弱性（CVE-2020-1938 / CNVD-2020-1048）の一括検出ツール。 このプロジェクトはKit4yのプロジェクトをベースに修正を加えたものです。 コード修正 ip.txtにドメインまたはIPが1つしかない場合、threadCountが1になりプログラムが実際に実行されないため、スレッド数を判定するコードを追加しました。 root@kitploit: ... if threadCount ...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

python2によるTomcat-Ajpプロトコルのファイル読み取り脆弱性のマルチスレッドスキャン SRCのスコアを稼ぐ人への特典 pocはhttps://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/から取得しました。pocの作者は本人ではありません！！！！ 操作方法 1、スキャンしたいドメイン/IPをip.txtに置きます ip.txtにはプロトコルを記載する必要はありません。例： root@kitploit: 127.0.0.1 www.baidu.com www.google.com 2、python...

CVE-2020-1938

CVE-2020-1938 Suricata 检测规则 root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...

ghostcat

Ghostcat - CVE-2020-1938 Exploit Tomcat에서 AJP 커넥터포트 8009를 통해 파일을 읽습니다. 사용법: python3 ghostcat.py 파일 """ Guardar el script cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF Dar permisos y ejecutar chmod +x ghostcat.py Leer tomcat-users.xml credenciales del Tomcat Manager python3...

CVE-2020-1938

CVE-2020-1938 検出ルール root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...

CVE-2020-1938

선언: 모든 사이버 보안 도구의 사용은 국가 법률, 업계 규범 및 대상 시스템의 관련 규정을 준수해야 하며, 불법이거나 타인의 정당한 권리를 침해하는 용도로 사용해서는 안 됩니다. 사용자는 어떠한 도구도 절대적인 안전을 보장할 수 없으며, 부적절한 사용은 법적 위험, 기술적 대응 또는 데이터 오염을 초래할 수 있음을 인식해야 합니다. 사용자는 본 선언 및 관련 규정 위반으로 인해 발생하는 모든 책임을 스스로 부담해야 합니다. 요구사항: python3 실행: python CVE-2020-1938.py your-ip -p 8009...

Ghostcat-Tomcat-AJP-Exploit-Py3

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 취약점 탐지 도구 소개 이 프로젝트는 Apache Tomcat AJP 프로토콜의 로컬 파일 포함 취약점일반적으로 Ghostcat, CVE-2020-1938 / CNVD-2020-10487을 검증하기 위한 Python 검증 스크립트를 제공합니다. 이 스크립트는 초기에 유포된 Python 2 버전을 기반으로 전면적으로 재구성 및 수정 되었으며, Python 3 환경과 완전히 호환되고, StringIO, base64 인코딩 및 바이너리 데이터와 문...

Linux Distros Unpatched Vulnerability : CVE-2026-15554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared- secret authentication. This enables an unauthenticated...

CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

DEBIAN-CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

EUVD-2026-55981

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

PT-2026-70088

Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description The Undertow AJP listener accepts forged ssl cert and is ssl AJP attributes without requiring shared-secret authentication. This allows an unauthenticated attacker with direct TCP access to...

Exploit for CVE-2020-1938

Ghostcat - CVE-2020-1938 Exploit Lee archivos del Tomcat via AJP...

EUVD-2007-1485

Malware in sbrugna...

SUSE CVE-2013-3707

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 OES 2 Linux, and OES 11 Linux Gold and SP1, does not make the intended SSLfree and SSLshutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

Exploit for CVE-2020-1938

It is an exploit module/toolkit targeting Apache Tomcat. The primary CVE ID is CVE-2020-1938, also known as CNVD-2020-10487. The vulnerability class is Local File Inclusion LFI. The probable entry point is the poc.py script, which is typically invoked by running python poc.py with the required...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...