Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-12617 PoC — Apache Tomcat 安全漏洞

Source
https://github.com/devcoinfet/CVE-2017-12617
Associated Vulnerability
Title:Apache Tomcat 安全漏洞 (CVE-2017-12617)
Description:When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Description
Code put together from a few peoples ideas credit given don't use maliciously please
Readme
# CVE-2017-12617
Code put together from a few peoples ideas credit given don't use maliciously please
File Snapshot

 [4.0K]  /data/pocs/ba6ed84c354bf17a114c7d27b425eb784b6bbba5
├── [3.9K]  apachetomcat.py
├── [1.0K]  LICENSE
└── [ 102]  README.md

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →