Warelock / cve-2020-1938

cve-2020-1938 Tomcat-Ajp-lfi.git脚本
2 stars 0 forks source link

file #1

Open volekq opened 2 months ago

volekq commented 2 months ago

About : default='WEB-INF/web.xml

what can be used to get a shell?

volekq commented 2 months ago

python3 CVE-2020-1938Scan.py -p 8009 -f WEB-INF/web.xml -i 10.10.10.2

Traceback (most recent call last):
  File "/home/kali/Desktop/CVE-2020-1938Scan.py", line 327, in <module>
    t = Tomcat(args.ip, args.port)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/kali/Desktop/CVE-2020-1938Scan.py", line 262, in __init__
    self.stream = self.socket.makefile("rb", bufsize=0)
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: socket.makefile() got an unexpected keyword argument 'bufsize'