Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis — CVE-2020-1938-Tomcat-AJP(Ghostcat)-Analysis | Kitploit
Tools/GitHubGitHub/sangrok-jeon/cve-2020-1938-tomcat-ajp-ghostcat--analysis
Vulnerability AnalysisExploitationWeb SecurityPapers & ResearchLearning & Education
GitHubsangrok-jeon/cve-2020-1938-tomcat-ajp-ghostcat--analysis

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CVE-2020-1938-Tomcat-AJP(Ghostcat)-Analysis

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
4 months agoNot yet reviewed

CVE-2020-1938 Tomcat AJP Ghostcat Analysis

This repository contains a Markdown analysis report for CVE-2020-1938 (Ghostcat) and the image assets used in the report.

Contents

  • Report: docs/report/CVE-2020-1938-Analysis-Report.md
  • Images: docs/images

Report Scope

The report is organized around:

  • Vulnerability background
  • Attack flow using a PoC
  • Root cause analysis based on Tomcat source code
  • Trigger conditions for file read and JSP execution
  • Patch comparison between Tomcat 9.0.30 and 9.0.31

Repository Structure

root@kitploit:~
docs/
  images/
  report/
    CVE-2020-1938-Analysis-Report.md
README.md

Notes

  • The report is written in Markdown.
  • All referenced figures are stored under docs/images.
  • Image links inside the report use relative paths so the document renders correctly on GitHub.
Download Tool