This whitepaper focuses on explaining the Apache Ghostcat vulnerability and how it can be used to read file contents of all web applications deployed on Tomcat.
You can download it from the following link: https://packetstormsecurity.com/files/download/161907/Apache_Ghostcat.pdf
Source: https://packetstormsecurity.com/files/161907/Apache-Ghostcat-Exploitation.html