ConnectionRefusedError about ajpy

[hypn0s]

Hi @dattachandan ,

As I can see from your commands, you don't set the optional argument correctly. The port flag should be set before the IP address:
python tomcat.py version --port 20022 10.2.2.11

The same thing applies to the version and list commands. By default, the TCP port 8009 is used.

[dattachandan]

Thanks, tried but gives a different error

python tomcat.py version --port 20022 10.2.2.11
usage: tomcat.py [-h] [--port PORT] [-v]
                 {bf,upload,undeploy,version,list,read_file} ... target
tomcat.py: error: unrecognized arguments: --port 20022

[hypn0s]

Sorry, I was completely wrong, as you can see from the provided usage:

python tomcat.py --port 20022 version 10.2.2.11

argparse sucks with subparsers...

[dattachandan]

Thanks, that worked.

Does this output mean the tomcat is patched without this CVE issue?

python tomcat.py  --port 9009 version 10.2.2.173
No data in response. Headers:
 {'data_length': 10,
 'http_status_code': 200,
 'http_status_msg': b'OK',
 'magic': 16706,
 'num_headers': 0,
 'prefix_code': 4,
 'response_headers': {}}
None

[hypn0s]

This only means the version could not be retrieved, as in not included in the pages.