Exploit for WebSocket Vulnerability in Apache Tomcat (CVE-2020-13935)

In the corresponding blog post the analysis and exploitation of the vulnerability is explained in detail.

Usage

Clone the repository, then build the tcdos binary. Run the program as follows to test whether a particular WebSocket endpoint is vulnerable:

$ git clone https://github.com/RedTeamPentesting/CVE-2020-13935
$ cd CVE-2020-13935
$ go build
$ ./tcdos [WebSocket endpoint]

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
go.mod		go.mod
go.sum		go.sum
main.go		main.go