CVE-2020-1938 PoC — Apache Tomcat 安全漏洞

Description

An implementation of CVE-2020-1938

介绍

### This tool exploits an [LFI vulnerability](https://secnhack.in/local-file-inclusion-lfi-types-mitigation-and-exploit/) within Apache Tomcat named [CVE-2020-1938](https://nvd.nist.gov/vuln/detail/CVE-2020-1938) to not only view sensitive files, but also to run malicious JSP payloads.
## It can be downloaded [here](https://github.com/jptr218/ghostcat/raw/main/ghostcat.exe) (you will need to run it from the command line)
### Usage:

### `ghostcat [target] [HTTP port] [AJP port] [file] [read/eval]`

文件快照

备注