Sploitus

Exploit for Deserialization of Untrusted Data in Apache Tomcat

githubexploit Β· 2025-03-13

Exploit Code

README17 lines
## https://sploitus.com/exploit?id=7A0ACF29-A64D-5A74-97D9-CE5816D2F10D
# CVE-2025-24813-PoC  
Apache Tomcat remote code execution vulnerability batch detection script (CVE-2025-24813)  

Disclaimer:  
The vulnerabilities described in this article, along with their reproduction steps, are intended for research and educational purposes related to network security. No one may use the information provided in this article for illegal purposes or unauthorized system testing. The author assumes no responsibility for any direct or indirect damage caused by the use of the information in this article. If infringement is involved, please contact us promptly, and we will handle it and remove the relevant content as soon as possible. For more PoC examples, please refer to:  
https://pc.fenchuan8.com/#/index?forum=101158&yqm=DGR4X  

The exploitation conditions are relatively strict; this script is only a conceptual validation for environments with vulnerabilities.  

How to use:  
Batch detection supports multi-threading:  
`python poc.py -l url.txt -t 5`  
Individual detection:  
`python poc.py -u your-ip`  

![Image](https://github.com/user-attachments/assets/9ac72d24-8a1f-488c-8772-1572ef12d2e5)