mirror of https://github.com/1N3/Sn1per.git
9 lines
332 B
Bash
9 lines
332 B
Bash
AUTHOR='@xer0dayz'
|
|
VULN_NAME='CVE-2020-9484 - Apache Tomcat RCE by deserialization'
|
|
URI="/index.jsp"
|
|
METHOD='GET'
|
|
MATCH='ObjectInputStream|PersistentManagerBase'
|
|
SEVERITY='P1 - CRITICAL'
|
|
CURL_OPTS="--user-agent '' -s --insecure -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/groovy' "
|
|
SECONDARY_COMMANDS=''
|
|
GREP_OPTIONS='-i' |