Shulou(Shulou.com)06/01 Report--

This article introduces you how to use the CVE-2020-1938 batch scanning tool, the content is very detailed, interested friends can refer to, I hope it can be helpful to you.

Use of 0x01 tool

The source of the tool is that you can download it yourself or reply to 005 in the background.

Https://github.com/Kit4y/CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

1. Put the destination address in the ip.txt text.

two。 Scanning the target IP for opening the Ajp8009 port using the threading-find-port-8009.py script generates an open port 8009 address file.

Python threading-find-port-8009.py

3. After running threading-CNVD-2020-10487-Tomcat-Ajp-lfi.py, the destination address is read from the 8009.txt file and then scanned in batches, and the vulnerable address is in the vul.txt.

Python threading-CNVD-2020-10487-Tomcat-Ajp-lfi.py

The 4.src domain name collection folder contains the assets of the education industry and the public welfare assets of Butian.

0x02 laws and regulations

Ps1: the last line of both scripts is the number of threads-default is 20, which can be modified on line threading-find-port-8009.py 67 and line threading-CNVD-2020-10487-Tomcat-Ajp-lfi.py 341.

Thread_num=20 on how to use CVE-2020-1938 batch scanning tool to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.