CVE-2017-12617 PoC — Apache Tomcat 安全漏洞

Source

https://github.com/ygouzerh/CVE-2017-12617

Associated Vulnerability

Title:Apache Tomcat 安全漏洞 (CVE-2017-12617)
Description:When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Description

Proof of Concept - RCE Exploitation : Web Shell on Apache Tomcat - Ensimag January 2018

Readme

# Getting started

The purpose of this Proof Of Concept is to demonstrate how it is possible to use the CVE-2017-12617
in order to have a remote control on an Apache Tomcat server.

## Instructions

1. Please execute this command to run the server.

`make server_up`

2. Execute this command to run the attack and upload a web shell on the server (need cURL).

`make attack`

> If this command don't open your navigator, you could go to :
`http://localhost:8080/web_shell.jsp?cmd=pwd`

You will now have access to a web shell on the server, directly in your browser.

## Questions

If you have any problems to run this Proof of Concept, please create an issue at : https://github.com/ygouzerh/CVE-2017-12617/issues , we will do our best to answer you as quickly as possible.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!