Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-1938_Ghostcat-PoC — Apache Tomcat AJP Ghostcat (CVE-2020-1938) exploit tool for file disclosure with multi-target scanning, custom wordlists, and upload point detection capabilities | Kitploit
Tools/GitHubGitHub/abrewer251/cve-2020-1938_ghostcat-poc
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubabrewer251/cve-2020-1938_ghostcat-poc

CVE-2020-1938_Ghostcat-PoC

Apache Tomcat AJP Ghostcat (CVE-2020-1938) exploit tool for file disclosure with multi-target scanning, custom wordlists, and upload point detection capabilities

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
139 months agoNot yet reviewed
Share

CVE-2020-1938_Ghostcat-PoC - CVE-2020-1938

A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability (CVE-2020-1938) with advanced features for penetration testing and security research.

Python Version License Version

🔍 Overview

The Ghostcat vulnerability (CVE-2020-1938) allows attackers to read arbitrary files from web applications deployed on vulnerable Apache Tomcat servers via the AJP (Apache JServ Protocol) connector. This tool automates the exploitation process with support for:

  • Multi-target scanning with threading
  • Custom wordlist support for file enumeration
  • Upload point detection to identify potential RCE vectors
  • JSP payload generation for post-exploitation
  • Optimized performance with configurable timeouts and threads

🎯 Affected Versions

  • Apache Tomcat 9.0.0.M1 to 9.0.0.30
  • Apache Tomcat 8.5.0 to 8.5.50
  • Apache Tomcat 7.0.0 to 7.0.99

📋 Features

Core Functionality

  • ✅ Arbitrary file read via AJP protocol exploitation
  • ✅ Fast multi-threaded scanning (50+ threads default)
  • ✅ Built-in wordlist with 25+ high-value targets
  • ✅ Custom wordlist support for comprehensive enumeration
  • ✅ Automatic result saving with organized output
  • ✅ Progress tracking with ETA and rate display

Advanced Features

  • ✅ Upload point detection in Spring, Struts, and JSP applications
  • ✅ Configuration file parsing (web.xml, Spring, etc.)
  • ✅ JSP webshell payload generation
  • ✅ Multi-target batch processing
  • ✅ Verbose debugging mode
  • ✅ Graceful interrupt handling (Ctrl+C)

🚀 Installation

Requirements

  • Python 3.6 or higher
  • No external dependencies (uses only Python standard library)

Quick Start

root@kitploit:~
# Clone the repository
git clone https://github.com/abrewer251/CVE-2020-1938_Ghostcat-PoC.git
cd CVE-2020-1938_Ghostcat-PoC

# Make executable
chmod +x ghostcat.py

# Run
python3 ghostcat.py -h
Download Tool