Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-12617 PoC — Apache Tomcat 安全漏洞

Source
https://github.com/yZ1337/CVE-2017-12617
Associated Vulnerability
Title:Apache Tomcat 安全漏洞 (CVE-2017-12617)
Description:When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Description
CVE-2017-12617
Readme
# CVE-2017-12617

Updated version of this repo: https://github.com/cyberheartmi9/CVE-2017-12617

- Updated it to work with Python3

## Run
```
python3 CVE-2017-12617.py -u http://127.0.0.1
python3 CVE-2017-12617.py --url http://127.0.0.1
python3 CVE-2017-12617.py -u http://127.0.0.1 -p pwn
python3 CVE-2017-12617.py --url http://127.0.0.1 -pwn pwn
python3 CVE-2017-12617.py -l hotsts.txt
python3 CVE-2017-12617.py --list hosts.txt
```
File Snapshot

 [4.0K]  /data/pocs/2ae3233eded9ebe6a0bcffbdb297290d2d0f8b73
├── [6.4K]  CVE-2017-12617.py
├── [ 34K]  LICENSE
└── [ 436]  README.md

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →