Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/pyn3rd/Apache-Tomcat-Redis-Remote-Code-Execution

Apache-Tomcat-Redis-Remote-Code-Execution
https://github.com/pyn3rd/Apache-Tomcat-Redis-Remote-Code-Execution

Last synced: 21 days ago
JSON representation

Apache-Tomcat-Redis-Remote-Code-Execution

Awesome Lists containing this project

README

        

# Apache-Tomcat-Redis-Remote-Code-Execution

#### 0x01 Add the following JARs to /lib directory.

```
commons-pool2-2.2.jar
jedis-3.0.0.jar
tomcat8.5-redis-session-manager.jar
```

#### 0x02 Modify the configuration file, `` conf/context.xml `` then start Tomcat Server and MongoDB Server.

```


```

#### 0x03 Write the Java Serialization Gadget into Redis with the PoC.

#### 0x04 When users login again, there is Remote Code Execution.