Most of the Turkish government servers are Tomcat

The do file extension is for Apache Tomcat

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Many exploits exist for Tomcat
—–
You can use this tool, for example:
https://github.com/1N3/jexboss

A script to scan the Apache Tomcat server for several known and dangerous vulnerabilities
Everything is done automatically. You only have to give it the host and the port to examine it and give you a report on the existing gaps .. in addition to an automatic exploit of the existing gaps.