TomcatScanPro

TomcatScanPro Si crees que este proyecto te ha sido útil, ¡no olvides darle una estrella ⭐! ¡Tu apoyo es la motivación para seguir mejorando y optimizando este proyecto! 😊 Introducción Este proyecto es una herramienta de detección de contraseñas débiles para servicios Tomcat. Además de soportar...

CNVD-2020-10487-Bulk-verification

CNVD-2020-10487CVE-2020-1938批量验证脚本 批量脚本，基于@YDHCUI的POC文件制作，批量且可以自动截图，方便复核 一、环境准备 虚拟环境请用conda安装（自行百度miniconda安装），因为POC用的python2，所以要建一个python2环境，一个python3环境 python2POC运行环境： conda create -n python2 python=python2.7 python3本脚本运行环境: conda create -n biubiubiu python=python3.7 pip install pywin32 pip...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

python2多线程扫描Tomcat-Ajp协议文件读取漏洞 刷src分狗的福利 poc来源于https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/，poc作者不是本人！！！！ 操作 1、将需要扫描的域名/ip放于 ip.txt ip.txt中不需要加协议，比如 127.0.0.1 www.baidu.com www.google.com 2、python threading-find-port-8009.py 将会生成8009.txt，作用为扫描ip.txt中域名/ip找出开放8009端口 3、python...

CNVD-2020-10487

creationtimestamp| type| source ---|---|--- 2026-10-03 23:00:18+00:00| seen| Telegram/CgqCbEaEQLXIUq5zmQ0FnVmfcgcKBSsAp2fpfEd3o6h0GKs 2026-10-03 23:00:18+00:00| published-proof-of-concept| Telegram/CgqCbEaEQLXIUq5zmQ0FnVmfcgcKBSsAp2fpfEd3o6h0GKs...

Some-PoC-oR-ExP

This repository is an offensive tool for collecting or writing various vulnerability POCs and exploits. The primary vulnerability targeted by the provided code is CNVD-2020-10487, a Tomcat-Ajp LFI Local File Inclusion vulnerability. The tool is designed to exploit this vulnerability to gain...

Some-PoC-oR-ExP

This repository is an offensive tool for collecting or writing various vulnerability PoCs proofs of concept and exploits. The primary vulnerability targeted by the code is CNVD-2020-10487, a Tomcat-Ajp local file inclusion LFI vulnerability. The tool is designed to exploit this vulnerability to...

Some-PoC-oR-ExP

This repository is an offensive tool for collecting or writing various vulnerability PoCs proofs of concept and exploits. The primary vulnerability targeted by the code is a remote code execution RCE vulnerability in Apache Tomcat, identified as CNVD-2020-10487. The exploit is implemented in Pyth...

Apache Tomcat - AJP 'Ghostcat File Read/Inclusion

!/usr/bin/env python CNVD-2020-10487 Tomcat-Ajp lfi by ydhcui import struct Some references: https://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html def packstrings: if s is None: return struct.pack"h", -1 l = lens return struct.pack"H%dsb" % l, l, s.encode'utf8', 0 def unpackstream, fmt: size ...