julioliraup/identificador-cve-2018-11759Bash script to detect and exploit CVE-2018-11759 in Apache Tomcat instances, with audit logging of target load balancer details, internal addresses, and routes.
Other language git - pt-BR
The archive main are a script in bash for exploiting.
The urls shall use the protocol and complete addres, example: https://test.site.com.br
For more urls in one consult, can be used the here-document, example:
# Call the bash, no request permission for exec
bash main << EOF
https://vulpagepagevul.com
http://pamonhaemandioca.gov.br
https://youtube.com
# ...
EOF
If no want use the here-document, he can be open with bash main
To facilitate the audit report a file is created in files_cap/ with name of target.data that have all details of target load balancer, with internal address, ports, timestemp, distros, routes, etc.
This exploit is free, GNU GPL version 3
