150 matches found
CVE-2020-1938
CVE-2020-1938 Scanner for CVE-2020-1938 Scanner? PoC? Call it whatever you want. Just run it directly in a Python environment. Just enter the IP address as prompted. It is recommended to use it after Tomcat is set up. Scanner is a revised script that adds support for multiple IP address inputs an...
Ghostcat-CNVD-2020-10487
Ghostcat exp for CNVD-2020-10487CVE-2020-1938 tomcat ajp协议任意属性设置导致的文件读取和文件执行。 漏洞分析 代码仅供安全测试，请勿用于非法用途,造成的后果使用者负责与本人无关！！！ python3 ajpShooter.py -h /\ / \ | | | //\ | | ' \ \ | ' \ / \ / | / \ '| / | | | | \ \ | | | | | || / | / // | ./ /| ||/ / \|| |/|| 00theway,just for test usage:...
ghostcat
Ghostcat - CVE-2020-1938 Exploit Read Tomcat files via AJP connector port 8009 Usage: python3 ghostcat.py file """ Save the script cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF Set permissions and run chmod +x ghostcat.py Read tomcat-users.xml Tomcat Manager credentials pytho...
Tomcat-AJP-CVE-2020-1938
This project is based on 00theway's modified version...
Ghostcat-Tomcat-AJP-Exploit-Py3
Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerability Detection Tool Introduction This project provides a Python verification script for verifying the Apache Tomcat AJP protocol local file inclusion vulnerability commonly known as Ghostcat, CVE-2020-1938 / CNVD-2020-10487. This script is ...
Ghostcat
Ghostcat CVE-2020-1938 exploit...
CVE-2020-1938
This repository does not have a README...
CVE-2020-1938-MSF-MODULE
CVE-2020-1938-MSF-MODULE Modified version of auxiliary/admin/http/tomcatghostcat, Read any file Overwrite the file/metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb and restart msfconsole to execute reloadall. Then you can use the module...
CVE-2020-1938-Exploitation
CVE-2020-1938 Exploitation Apache Tomcat arbitrary JSP upload leading to RCE Description CVE-2020-1938 is a critical vulnerability which impacts Apache Tomcat from 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 ⚠️ This was exploited in a Hack The Box lab. 🔗 Reference: NIST NVD Entry...
CNVD-2020-10487-Bulk-verification
CNVD-2020-10487 CVE-2020-1938 Batch Verification Script Batch script, based on the POC file by @YDHCUI, supports batching and automatic screenshots for easy review. 1. Environment Preparation Use conda to install virtual environments search Baidu for miniconda installation. Since the POC uses...
tomcat-cve-2020-1938-check
tomcat-cve-2020-1938-check...
CVE-2020-1938
This repository does not have a README...
CNVD-2020-10487
Description The tool is intended for security research and internal audits only. It is forbidden to use it to launch illegal attacks. The user is responsible for any consequences. Apache Tomcat file inclusion vulnerability CVE-2020-1938 / CNVD-2020-1048 batch detection tool. This project is...
cve-2020-1938
This repository does not have a README...
CVE-2020-1938TomcatAjpScanner
CVE-2020-1938TomcatAjpScanner Batch scan for Tomcat AJP vulnerability Vulnerability Details On January 6, 2020, the National Information Security Vulnerability Sharing Platform CNVD included the Apache Tomcat file inclusion vulnerability CNVD-2020-10487, corresponding to CVE-2020-1938. Attackers...
CVE-2020-1938
cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...
CVE-2020-1938-Tomact-file_include-file_read
CVE-2020-1938Tomcat-fileinclude and filered Tomcat file inclusion and file read vulnerability exploitation POC File Read Usage :python2 "Tomcat-ROOT路径下文件读取CVE-2020-1938.py" -p 8009 -f /test.txt 127.0.0.1 File Inclusion Usage :python2 "Tomcat-ROOT路径下文件包含CVE-2020-1938.py" -p 8009 -f /test.txt...
CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis
CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...