Shulou(Shulou.com)05/31 Report--

This article introduces how the EXP reproduction of Apache Tomcat WebSocket denial of service vulnerabilities is very detailed. Interested friends can use it for reference. I hope it will be helpful to you.

Background

Recently, I have seen a lot of new mining posture and webshell upload posture caused by Weblogic unauthorized command execution vulnerability (CVE-2020-14882 + 14883). When I saw the Apache Tomcat WebSocket denial of service vulnerability (CVE-2020-13935), I couldn't help but want to repeat it on EXP.

Environment building

Quickly build a tomcat9.0.36 version through docker, and the results are as follows:

EXP recurrence

According to https://github.com/RedTeamPentesting/CVE-2020-13935

Run command

Go run main.go ws://localhost/examples/websocket/echoProgrammatic

You can see that cpu is immediately occupied.

Affected version:

Apache Tomcat 10.0.0-M1~10.0.0-M6

Apache Tomcat 9.0.0.M1~9.0.36

Apache Tomcat 8.5.0mm 8.5.56

Apache Tomcat 7.0.2707.0.104

Vulnerability fixes:

-upgrade to Apache Tomcat 10.0.0 M7 +

-upgrade to Apache Tomcat 9.0.37 +

-upgrade to Apache Tomcat 8.5.57 +

On the Apache Tomcat WebSocket denial of service vulnerability EXP reproduction is shared here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.