---
id: 5108
title: "Jetty Features for Hacking Web Apps"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/jetty-features-for-hacking-web-apps/"
published_at: "2022-09-15T14:14:15Z"
tags: ["rce", "java", "waf-bypass", "jetty", "web-server"]
phying_url: "https://phying.com/item/5108"
lang: en
---

# Jetty Features for Hacking Web Apps

## Summary

PT SWARM on attacking Jetty apps: fingerprinting via Server headers and /;' responses, enumerating webapps and contexts, achieving RCE via crafted XML, and bypassing WAFs in assessments.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2022-09-15T14:14:15Z
- **Original:** https://swarm.ptsecurity.com/jetty-features-for-hacking-web-apps/
- **Phying News:** https://phying.com/item/5108