Tomcat CVE

MHaggis · MHaggis · commit 7ed0d964ddca · 2025-03-25T12:37:23.000-06:00
diff --git a/datasets/attack_techniques/T1190/tomcat/tomcat.yml b/datasets/attack_techniques/T1190/tomcat/tomcat.yml
@@ -0,0 +1,11 @@
+author: Michael Haag, Splunk
+id: 9535ef60-d182-212c-bxbb-6d1bd61e83be
+date: '2025-03-26'
+description: Manual generation of attack data related to Tomcat with nginx proxypass. 
+environment: attack_range
+dataset:
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1190/tomcat/tomcat_nginx_access.log
+sourcetypes:
+- nginx:plus:kv
+references:
+- https://attack.mitre.org/techniques/T1190
diff --git a/datasets/attack_techniques/T1190/tomcat/tomcat_nginx_access.log b/datasets/attack_techniques/T1190/tomcat/tomcat_nginx_access.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:752e19d3a09418f7d2ebbf779f54ed7d1127045f7023138176f33e189ed28536
+size 29219

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+version https://git-lfs.github.com/spec/v1`
	`2`	`+oid sha256:752e19d3a09418f7d2ebbf779f54ed7d1127045f7023138176f33e189ed28536`
	`3`	`+size 29219`