what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Patrick Hof

JBoss DeploymentFileRepository WAR Deployment

Posted Sep 5, 2012

Authored by Patrick Hof, Jens Liebchen, h0ng10 | Site metasploit.com

This Metasploit module can be used to execute a payload on JBoss servers that have an exposed HTTPAdaptor's JMX Invoker exposed on the "JMXInvokerServlet". By invoking the methods provided by jboss.admin:DeploymentFileRepository a stager is deployed to finally upload the selected payload to the target. The DeploymentFileRepository methods are only available on Jboss 4.x and 5.x.

tags | exploit

advisories | CVE-2007-1036, OSVDB-33744

SHA-256 | c6b0010812e226801e4d081ec2319bf266148f85a99286b7a0ea268acccbcd45

Download | Favorite | View

JBoss JMX Console Beanshell Deployer WAR Upload And Deployment

Posted Jun 24, 2010

Authored by Patrick Hof, jduck | Site metasploit.com

This Metasploit module can be used to install a WAR file payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:BSHDeployer's createScriptDeployment() method.

tags | exploit

advisories | CVE-2010-0738

SHA-256 | 8bc89c8613979d44be9747d0a887fce9f0459d5d6182d9efc465b994ee91205b

Download | Favorite | View

BibORB.txt

Posted Feb 25, 2005

Authored by Patrick Hof

BibORB 1.3.2 is susceptible to SQL injection, cross site scripting, directory traversal, and arbitrary file upload vulnerabilities. Detailed exploitation provided.

tags | exploit, arbitrary, vulnerability, xss, sql injection, file upload

advisories | CVE-2005-0251, CVE-2005-0252, CVE-2005-0253, CVE-2005-0254

SHA-256 | 6bbe10137333240ad47282adad90a3b7777a81f0dc780ee486ce04283ddce6b9

Download | Favorite | View