CVE-2025-24813-PoC

Apache Tomcat Remote Code Execution Vulnerability Batch Detection Script (CVE-2025-24813)

Disclaimer:

The vulnerability and its reproduction steps described in this document are for cybersecurity research and educational purposes only. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author is not responsible for any direct or indirect damages caused by the use of the information in this document.

If there is any infringement, please contact us in a timely manner, and we will handle and delete the relevant content as soon as possible.

For more PoCs, see the group:

https://pc.fenchuan8.com/#/index?forum=101158&yqm=DGR4X

The exploitation conditions are quite strict. This script is only for conceptual verification of vulnerable environments.

Usage:

Batch detection supports multithreading:

python poc.py -l url.txt -t 5

Single detection:

python poc.py -u your-ip