## https://sploitus.com/exploit?id=C0E96608-5973-55B8-ACFB-E03D034D74AC
This is an open-source application server attack toolkit called clusterd. It automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. The toolkit currently supports six different application server platforms, with several more in development and research phases.
The toolkit can be installed by cloning the GitHub repository. It features a fingerprinting engine that attempts to discover what service is listening and run various fingerprint tests against it. The engine can also be hinted at a specific service, attempting to first load only that engine.
The toolkit has a core module called deployer that loads a specific platform's deployers and iterates through fingerprints to find one to deploy to. If the --invoke flag was passed, it automatically runs invoke_war, which will invoke the invoke_payload module.
The toolkit also has a module called undeployer that undeploys a list of interfaces.
The toolkit uses a state class to define clusterd-wide variables, such as supported platforms, proxy settings, authentication credentials, and connection timeout.
The toolkit has a logging class that specifies different logging levels, such as INFO, SUCCESS, ERROR, DEBUG, and UPDATE.
The toolkit has a parse_cmd module that parses command-line options and connection-related arguments.
The toolkit has a utility module that provides functions for