"CVE-2025-24813 Apache Tomcat RCE PoC" by absholi7ly
"Prerequisites for Successful Exploitation
For this PoC to successfully exploit the vulnerability, the following conditions must be met:
1) Apache Tomcat Version: The target must be running a vulnerable version of Apache Tomcat.
2) Writable Directory: The server must allow PUT requests
3) Deserialization Trigger: The server must process the uploaded session file (e.g., via a GET request to /index.jsp) and trigger deserialization of the payload.
4) Java Environment: The attacker’s machine must have Java installed to generate payloads using ysoserial or compile Java-based payloads.
5) ysoserial (Optional): If using the ysoserial payload type, the ysoserial.jar file must be available locally."
https://github.com/absholi7ly/POC-CVE-2025-24813