mirror of
https://github.com/DeNNiiInc/UltyScan.git
synced 2026-04-17 18:26:00 +00:00
9 lines
332 B
Bash
9 lines
332 B
Bash
AUTHOR='@xer0dayz'
|
|
VULN_NAME='CVE-2020-9484 - Apache Tomcat RCE by deserialization'
|
|
URI="/index.jsp"
|
|
METHOD='GET'
|
|
MATCH='ObjectInputStream|PersistentManagerBase'
|
|
SEVERITY='P1 - CRITICAL'
|
|
CURL_OPTS="--user-agent '' -s --insecure -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/groovy' "
|
|
SECONDARY_COMMANDS=''
|
|
GREP_OPTIONS='-i' |