CVE-2024-21733-POC

Notes:

1. tomcat English environment
2. Specific constructed backend code, as shown in ROOT/vulnerable.jsp
3. If needed, modify the server address and port in the script. Default 127.0.0.1:8080
4. Timeout trigger, default 20 seconds, usually less than this time

Process:

1. Download a specific version of tomcat

https://archive.apache.org/dist/tomcat/

Or use the docker environment: tomcat:9.0.43

docker-compose up -d

2. Construct vulnerable.jsp (ROOT/vulnerable.jsp) and upload it to ROOT

3. Run the script

Or simulate a real environment for exploit

1. Run victim.py to simulate a normal user's POST request, the response outputs ID data
2. When prompted [*] Press Enter to close socket connection..., run attacker.py to exploit. If successful, the returned data will contain Invalid character found in method name and part of the ID data
3. Press Enter in the terminal running victim.py to close the connection