Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-1938 — Proof-of-concept exploit for CVE-2020-1938 (Ghostcat) targeting Apache Tomcat AJP connector, allowing file read and potential RCE. Includes Docker setup and usage instructions. | Kitploit
Tools/GitHubGitHub/redteam-rediron/cve-2020-1938
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubredteam-rediron/cve-2020-1938

CVE-2020-1938

Proof-of-concept exploit for CVE-2020-1938 (Ghostcat) targeting Apache Tomcat AJP connector, allowing file read and potential RCE. Includes Docker setup and usage instructions.

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-1938

CVE-2020-1938 fixes errors in the PoC from https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git and has been verified to work on Apache Tomcat/8.0.43.

image

Practice Steps

  1. Create docker-compose.yml
  2. docker compose up -d
  3. python3 CVE-2020-1938.py -p 8009 -f WEB-INF/web.xml

Final Result

image

Download Tool