jorge2rubio/cve-2019-0232Automated exploitation tool for CVE-2019-0232 (Apache Tomcat CGI RCE) with command execution and reverse shell modes, automatic URL encoding, and temporary HTTP server for payload delivery.
This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apache Tomcat CGI endpoint using certutil, triggers the reverse shell, and then automatically terminates the HTTP server. The script validates required arguments, constructs the payload URLs, sends exploitation requests, and ensures a streamlined and controlled exploitation process.
