Exploit for CVE-2020-1938

## https://sploitus.com/exploit?id=B34F396F-DCCC-5BA0-85A6-D2D50BE04BAA
# Ghostcat Scanner - CVE-2020-1938

A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability (CVE-2020-1938) with advanced features for penetration testing and security research.

![Python Version](https://img.shields.io/badge/python-3.6+-blue.svg)
![License](https://img.shields.io/badge/license-MIT-green.svg)
![Version](https://img.shields.io/badge/version-2.0-orange.svg)

## 🔍 Overview

The Ghostcat vulnerability (CVE-2020-1938) allows attackers to read arbitrary files from web applications deployed on vulnerable Apache Tomcat servers via the AJP (Apache JServ Protocol) connector. This tool automates the exploitation process with support for:

- **Multi-target scanning** with threading
- **Custom wordlist support** for file enumeration
- **Upload point detection** to identify potential RCE vectors
- **JSP payload generation** for post-exploitation
- **Optimized performance** with configurable timeouts and threads

## 🎯 Affected Versions

- Apache Tomcat 9.0.0.M1 to 9.0.0.30
- Apache Tomcat 8.5.0 to 8.5.50  
- Apache Tomcat 7.0.0 to 7.0.99

## 📋 Features

### Core Functionality
- ✅ Arbitrary file read via AJP protocol exploitation
- ✅ Fast multi-threaded scanning (50+ threads default)
- ✅ Built-in wordlist with 25+ high-value targets
- ✅ Custom wordlist support for comprehensive enumeration
- ✅ Automatic result saving with organized output
- ✅ Progress tracking with ETA and rate display

### Advanced Features
- ✅ Upload point detection in Spring, Struts, and JSP applications
- ✅ Configuration file parsing (web.xml, Spring, etc.)
- ✅ JSP webshell payload generation
- ✅ Multi-target batch processing
- ✅ Verbose debugging mode
- ✅ Graceful interrupt handling (Ctrl+C)

## 🚀 Installation

### Requirements
- Python 3.6 or higher
- No external dependencies (uses only Python standard library)

### Quick Start

```bash
# Clone the repository
git clone https://github.com/yourusername/ghostcat-scanner.git
cd ghostcat-scanner

# Make executable
chmod +x ghostcat.py

# Run
python3 ghostcat.py -h