Back Sploitus

AttackTomcat exploit

Sploitus • September 23, 2026

CVE-2017-12615 Уязвимость загрузки файлов через PUT tomcat-pass-getshell Слабая аутентификация при развертывании WAR-пакета Подбор слабых паролей CVE-2020-1938 Чтение/включение файлов Tomcat

Перед первым использованием сначала перенастройте файл конфигурации в настройках, остальные вопросы внимательно прочитайте!!!, при запуске `java -jar \*.jar` можно просматривать журналы работы!!

Скачайте исходный код и соберите через Maven либо сразу скачайте Releases.

Запустите двойным щелчком по jar-пакету или выполните `java -jar AttackTomcat`

![image-20221113190826427](

![image-20221113190913584](

Поддерживается использование HTTP и socket-прокси.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploits Targeting Tomcat Vulnerabilities CVE-2017-12615 and CVE-2020-1938 Recent cybersecurity tools have emerged that exploit vulnerabilities in Apache Tomcat, specifically CVE-2017-12615 and CVE-2020-1938. The TomcatScanPro tool, released on September 19, 2026, allows users to check for weak passwords and exploit CVE-2017-12615, which has been actively exploited since its disclosure in 2017. Additionally, the AttackTomcat tool, published on September 23, 2026, focuses on file upload vulnerabilities and weak authentication, targeting CVE-2020-1938. Both tools enable attackers to gain unauthorized access to sensitive information on Tomcat servers. The tools support multiple URL checks and utilize efficient resource management techniques. Organizations using Apache Tomcat are advised to assess their configurations and apply necessary security measures against these exploits. 2 sources 71

Extracted Entities

AttackTomcat exploit

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

CWE Weaknesses (1)

Platforms (1)