rukov Posted December 7, 2015 Report Posted December 7, 2015 JexBoss - Jboss verify and EXploitation ToolJexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server.Requirements Python <= 2.7.xInstallationTo install the latest version of JexBoss, please use the following commands:git clone https://github.com/joaomatosf/jexboss.gitcd jexbosspython jexboss.pyFeaturesThe tool and exploits were developed and tested for versions 3, 4, 5 and 6 of the JBoss Application Server.The exploitation vectors are: /jmx-console tested and working in JBoss versions 4, 5 and 6 /web-console/Invoker tested and working in JBoss versions 4 /invoker/JMXInvokerServlet tested and working in JBoss versions 4 and 5Usage example Check the file "demo.png"$ git clone https://github.com/joaomatosf/jexboss.git$ cd jexboss$ python jexboss.py https://site-teste.com ** Checking Host: https://site-teste.com ** * Checking web-console: [ OK ] * Checking jmx-console: [ VULNERABLE ] * Checking JMXInvokerServlet: [ VULNERABLE ]Download https://github.com/joaomatosf/jexboss Quote
