## https://sploitus.com/exploit?id=BBB17262-A00F-5DCF-BFF5-C752B822F8ED
# CVE-2025-24813 Proof-of-Concept (Standalone)
This repository contains a non-destructive, standalone PoC for [CVE-2025-24813](https://nvd.nist.gov/vuln/detail/CVE-2025-24813), a vulnerability in Apache Tomcat 9.0.55 allowing remote file upload via partial `PUT` requests. This exploit demonstrates code execution by uploading and accessing a benign JSP file.
---
## 📁 Contents
- `proof.jsp`: Harmless JSP payload to demonstrate code execution.
- `cve_2025_24813_client_demo.py`: Python3 script to detect, exploit, verify, log, and clean up.
- `report.txt`: Auto-generated log of the testing session.
---
## 🧰 Requirements
- Python 3.7+
- Optional: `html2image` for screenshot capture:
```bash
pip install html2image
```
---
## 🖥️ Usage
```bash
python3 cve_2025_24813_client_demo.py
```
You will be prompted for:
- Target IP or hostname (e.g., `192.168.1.100`)
- Target port (e.g., `8080`)
---
## 🔍 Features
- ✅ Partial PUT vulnerability check (CVE-2025-24813)
- ✅ Optional screenshot capture (via `html2image`)
- ✅ Interactive prompts and confirmation before exploitation
- ✅ Color-coded terminal output
- ✅ Logs to `report.txt`
- ✅ Auto cleanup via HTTP DELETE after 24 hours
---
## ⚠️ Safety & Ethics
This PoC is **completely innocuous**. It does:
- No persistence
- No shell, no command execution
- Just uploads and accesses a static JSP
Use only on systems you are **authorized** to test.
---
## 📸 Example Output
```bash
[✔] Server appears to support partial PUT!
[✅] Exploit verified: JSP executed successfully.
[URL] http://target:8080/uploads/proof.jsp
[*] Sleeping for 24.0 hours before cleanup...
```
---
## 📦 Packaging for GitHub
- This repo is ready for GitHub publishing.
- Add a license of your choice (e.g. MIT).
- Push with:
```bash
git init
git add .
git commit -m "Initial CVE-2025-24813 PoC"
git remote add origin https://github.com/YOURUSERNAME/cve-2025-24813-poc.git
git push -u origin main
```
---
## 🧼 Cleanup
After 24 hours, the script automatically issues an HTTP `DELETE` to remove the JSP. You can also remove it manually.
---
## 📄 License
MIT or custom license of your choice.
---
## ✉️ Contact
Maintained by [Your Name]. For authorized use only.
## 📛 GitHub Badges
---
## 🧩 Full Feature List
- ✅ Interactive CLI for target IP/port input
- ✅ Vulnerability detection via:
- Partial PUT test
- Fallback header analysis (`Server: Apache/Tomcat`)
- ✅ User confirmation before exploitation
- ✅ Harmless `proof.jsp` upload with no side effects
- ✅ Live verification via HTTP GET
- ✅ Color-coded terminal output (green, yellow, red)
- ✅ Screenshot capture with `html2image`
- ✅ Auto-cleanup via HTTP DELETE after 24 hours
- ✅ All activity logged to `report.txt`
- ✅ `.gitignore`, `LICENSE`, GitHub badges
- ✅ GitHub Pages + release-ready metadata
- ✅ `setup.sh` for optional environment prep
- ✅ Disclosure template `disclosure.md` for blog/report use
- ✅ GitHub banner image `banner.png`
---
## 🧠 Notes
This project is designed to be shared publicly and used responsibly. If you find it useful, consider starring the repo and contributing via issues or pull requests.