After some Tomcat installment, not have revised the default password (spatially user admin, password to), like this may register directly.
Two tables of contents may visit:
/admin
/manager ml
under /admin table of contents use:
Service--host--actions--Create New Context establishes the table of contents which hypothesized table of contents Document Base fills in you to want to glance over, for instance c:\, Path write casually, for example /guizai
Then direct http://ip/guizai may see the c plate content.
under /manager ml table of contents use:
Here may upload a war document (to use in directly long-distance managing the tomcat service script document), from moves the establishment hypothesized catalog, therefore you may pack inside war yours jsp horse with ant, after then upload, visited under this hypothesized table of contents your jsp horse on OK.
Before I have encountered this kind of situation, but hit with ant has not made quite a while successfully, finally google to an article, the article name I has forgotten, the author was hyouhaku, at that time in his article said that he packed good, and has provided in the article appendix, but that appendix link expired, I added his QQ, wanted this document.
Yesterday after neeao there saw “tomcat obtains the administration authority use” to let me think this thing, neeao there has also issued a war document, here I send.
job.war.rar
no.war.rar
After the downloading, may use winrar to open, inside index.jsp is a jsp horse, you may replace you.
Attention: Before upload execution, certainly must change suffix .war to be only then good. after job.war upload execution, visits http://ip/job or http://ip/job/index.jsp directly then. after no.war upload execution, visits http://ip/no or http://ip/no/index.jsp directly then.
|
You are here: hacking technology
> crack analyzes
> Content
Category: Home
> crack analyzes