Sploitus

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

githubexploit · 2024-12-21

Exploit Code

README25 lines
## https://sploitus.com/exploit?id=C3088272-3927-5BA0-9E83-12C3717D7288
# Tomcat-CVE-2024-50379-Poc

![Language](https://img.shields.io/badge/language-golang-blue.svg)

> [!IMPORTANT]
> This is for learning and communication purposes only. Do not use it for illegal purposes.

RCE due to a race condition in Apache Tomcat

Reference: https://github.com/iSee857/CVE-2024-50379-PoC

# Demo

![](./demo.gif)

# Usage

```bash
go run main.go -u http://localhost:8080/
```

# Todo

- [ ] Detection mechanism for successful exploitation of the vulnerability