## https://sploitus.com/exploit?id=945A8721-4733-5A36-80DD-724561F4B9E4
This repository is an offensive tool for collecting or writing various vulnerability PoCs (proofs of concept) and exploits. The primary vulnerability addressed by the repository is CNVD-2020-10487, a Tomcat-Ajp local file inclusion (LFI) vulnerability. The repository contains two main files: `2020-10487.py` and `ActiveMQExP/ActiveMQExPV1.0.py`. The first file is a Python script that exploits the LFI vulnerability, while the second file is a Python script that exploits a vulnerability in Apache ActiveMQ, specifically CVE-2016-3088. The script is designed to upload a shell to the server and execute it. The repository also contains a PNG image file, `ActiveMQ_EXP_CURL版.png`, which appears to be a screenshot of the exploit in action. The script is written in Python and uses the `urllib` and `socket` libraries to establish a connection to the target server. The script then sends a request to the server to upload a shell, which is stored in the `put_file_path` variable. The script also sets the `AuthBasic` variable to the default credentials for the ActiveMQ server, which are `admin:admin`. The script then uses the `curl` command to