CVE-2017-12617 PoC — Apache Tomcat 安全漏洞

Source

https://github.com/tyranteye666/tomcat-cve-2017-12617

Associated Vulnerability

Title:Apache Tomcat 安全漏洞 (CVE-2017-12617)
Description:When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Description

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3

Readme

# Tomcat CVE-2017-12617 Exploit/PoC
Apache Tomcat &lt; 9.0.1 (Beta) / &lt; 8.5.23 / &lt; 8.0.47 / &lt; 7.0.8 - JSP Upload Bypass / Remote Code Execution for **Python3**

I just made a few adjustments to the original script to be compatible with Python 3!

---

If there's any problems or issues faced, feel free to shoot me an email satanclause666999@gmail.com or you can shoot me too if you want.

*Don't judge my email, it's used for as a throwaway*

---
# How to Use
./cve-2017-12617.py [options]

options:

-u ,--url [::] check target url if it's vulnerable

-p,--pwn [::] generate webshell and upload it

-l,--list [::] hosts list

[+]usage:

./cve-2017-12617.py -u http://127.0.0.1

./cve-2017-12617.py --url http://127.0.0.1

./cve-2017-12617.py -u http://127.0.0.1 -p pwn

./cve-2017-12617.py --url http://127.0.0.1 -pwn pwn

./cve-2017-12617.py -l hotsts.txt

./cve-2017-12617.py --list hosts.txt

File Snapshot


 [4.0K]  /data/pocs/c2aac02f16657e13763d546f3d4477caef9c1eb5
├── [ 907]  README.md
└── [5.4K]  tomcat-jsp.py

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!