Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-1938-Tomact-file_include-file_read — Tomcat的文件包含及文件读取漏洞利用POC | Kitploit
Tools/GitHubGitHub/sv3nbeast/cve-2020-1938-tomact-file_include-file_read
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubsv3nbeast/cve-2020-1938-tomact-file_include-file_read

CVE-2020-1938-Tomact-file_include-file_read

Tomcat的文件包含及文件读取漏洞利用POC

View Repository
541966 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-1938(Tomcat-file_include and file_red)

Tomcat file inclusion and file read vulnerability exploitation POC

File Read

  • Usage :python2 "Tomcat-ROOT路径下文件读取(CVE-2020-1938).py" -p 8009 -f /test.txt 127.0.0.1

File Inclusion

  • Usage :python2 "Tomcat-ROOT路径下文件包含(CVE-2020-1938).py" -p 8009 -f /test.txt 127.0.0.1

Reproduction details: http://www.svenbeast.com/post/fqSI9laE8/

  • img: RCE

References:

  • https://twitter.com/jas502n/status/1230531680999395328
  • https://forum.90sec.com/t/topic/801
  • https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/
Download Tool