lizhianyuguangming/tomcatscanprotomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含
README Version: 简体中文
This project is a weak password detection tool for Tomcat services. It supports multiple exploitation methods for CVE-2017-12615 vulnerability and integrates CNVD-2020-10487 (Tomcat AJP protocol local file inclusion vulnerability) exploitation capabilities, helping users efficiently detect vulnerabilities and obtain server sensitive information. The tool supports concurrent detection of multiple URLs and optimizes resource utilization through dynamic thread pool mechanism.
Supports three exploitation methods:
PUT /1.jsp/
PUT /1.jsp%20
PUT /1.jsp::$DATA
After successful upload, the tool will attempt to access and execute the uploaded JSP file to verify remote code execution capability.
Records success/failure status for each exploitation method separately.
getshellPrepare text files containing URLs, usernames and passwords named urls.txt, user.txt and passwd.txt respectively.
urls.txt format: https://127.0.0.1/ or https://127.0.0.1/manager/html (automatic detection)
Configure file paths and settings in config.yaml
Run script (successful exploits will be recorded in success.txt):
python TomcatScanPro.py
Install required modules:
pip install -r requirements.txt