RCE via XPath Injection in GeoTools

Repository is a self-contained reproduction and exploit study for CVE-2024-36401, an unauthenticated GeoServer RCE caused by unsafe JXPath evaluation in GeoTools. It is not tied to a major exploit framework; the main exploit logic is implemented in `exploit/exploit.py` with a secondary curl-based PoC in `exploit/exploit.sh`. Structure: `docker/` contains two nearly identical Dockerfiles that build GeoServer 2.25.1 (vulnerable) and 2.25.2 (patched) from official SourceForge binaries; `docker-compose.yml` exposes them on localhost ports 8080 and 8081; `exploit/` contains the Python exploit/verifier, shell PoC, payload catalog, and captured proof artifacts; `run-reproduction.sh` automates build, readiness checks, exploitation of both instances, and proof collection; `report/report.md` is a detailed technical write-up. Exploit capability: the Python script first enumerates layers via WFS GetCapabilities, then sends WFS GetPropertyValue requests with attacker-controlled `valueReference` values. It uses a blind timing payload `java.lang.Thread.sleep(8000)` to detect code execution from client-side response delay, and a command-execution payload `exec(java.lang.Runtime.getRuntime(),'touch /tmp/<marker>')` to create a file inside the target container. The shell PoC demonstrates the same technique with GET and POST/XML requests and documents that POST may help bypass defenses inspecting only query strings. `payloads.md` also documents alternate vectors through WFS GetFeature and WMS GetMap using `CQL_FILTER`. Observed behavior in included logs confirms real exploitation on the vulnerable instance: the blind probe delays the response by ~8 seconds and the file `/tmp/cve3641_1780498920` is created only on the vulnerable container. On the patched instance, the same payloads are rejected with `No such attribute` errors and no file is created. Overall, this is a legitimate operational PoC/verifier for unauthenticated web/network RCE against vulnerable GeoServer deployments.