You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: documentation/modules/exploit/multi/http/tomcat_mgr_deploy.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ This documentation is slightly different from the standard module documentation
3
3
This documentation is broken down by OS, Tomcat version, then privilege to show exploitation in each variation.
4
4
5
5
# Cleanup
6
-
It should be stated outright that the exploit does NOT undeploy the shellcode from Tomcat. This can be done [manually](#manual-cleanup).
6
+
It should be stated outright that the exploit MAY NOT undeploy the shellcode from Tomcat. This can be done [manually](#manual-cleanup).
7
7
8
8
# tomcat_mgr_upload
9
9
This module is VERY similar to `exploit/multi/http/tomcat_mgr_upload`, the main difference is this uses a `PUT` HTTP request, instead of going through a `POST` HTTP request through the GUI.
@@ -205,10 +205,10 @@ Of note, the user was given `manager-gui` permissions by default.
205
205
206
206
1. Edit `/etc/tomcat6/tomcat-users.xml` to add the following:
1. To verify the permissions are all set correctly, browse to `http://192.168.2.118:8087/manager/text/deploy`, and you should see `FAIL - Invalid parameters supplied for command [/deploy]
@@ -375,4 +375,4 @@ Of note, as of 7, the permission role 'manager' has been divided into several su
375
375
376
376
## Manual Cleanup
377
377
378
-
Manual cleanup can be done by logging into the `/manager` website. From there, click `Undeploy` within the `Application` list to remove the malicious app from Tomcat.
378
+
Manual cleanup can be done by logging into the `/manager` website. From there, click `Undeploy` within the `Application` list to remove the malicious app from Tomcat.
0 commit comments