This JBoss script deploys a JSP shell on the target JBoss AS server. Once deployed, the script uses its upload and command execution capability to provide an interactive session.
Features
- Multiplatform support – tested on Windows, Linux and Mac targets
- Support for bind and reverse bind shells
- Meterpreter shells and VNC support for Windows targets
Installation
Dependencies include
- Netcat
- Curl
- Metasploit v3, installed in the current path as “framework3”
You can download JBoss Autopwn here:
Or read more here.
secret says
Hey, man! Link don’t work, plz update! Tnx! )
STRSHR says
The whole github profile of spiderlabs is not available, any mirror will be appreciated.
jbossLover says
This exploit is the same to http://www.nruns.com/_downloads/Whitepaper-Hacking-jBoss-using-a-Browser.pdf or am i wrong?