Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacking with JSP Shells

netspi.com | blog | #pentesting | #java | #metasploit | #webshell | #tomcat | #jsp | #upload

Summary

Most enterprise data-centers house at least a few web servers that support Java Server Pages (JSP). In this blog, I’ll provide two JSP shell code examples and outline five common upload methods that can be used to get the shells onto vulnerable servers in order to execute arbitrary system commands.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Executing MSF Payloads via PowerShell Webshellery
A Metasploit module turns arbitrary file upload into shells on Windows backends: its JSP, PHP, or ASPX webshells launch base64-encoded PowerShell commands running MSF payloads past antivirus.
blog · netspi.com
Detecting Authorization Flaws in Java Spring via Source Code Review (SCR)
Broken access control often slips past dynamic testing. This article shows how secure code review of Spring annotations, expressions, and filters surfaces Java Spring privilege escalation paths early.
blog · netspi.com
Getting Shells at Terminal Velocity with Wopper
Wopper is a NetSPI tool that automates WordPress code execution from admin credentials: it uploads, executes, obfuscates, and self-deletes PHP files in seconds, replacing manual plugin upload steps.
blog · netspi.com
12 Top Pentesting Tools for Offensive Security Pros
NetSPI surveyed its 300-plus pentesters to rank twelve must-have offensive security tools, including Burp Suite, NMAP, CrackMapExec, Metasploit, BloodHound and Impacket, with commentary on each.
blog · netspi.com
Dockerizing the NetSPI Linux Labs
NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.
blog · netspi.com
Linux Hacking Case Studies Part 3: phpMyAdmin
Walks through attacking insecure phpMyAdmin installs: finding exposed instances, dictionary-attacking weak passwords, uploading webshells, then pivoting to world-writable cron scripts for escalation.
back