Tomcat_PUT_EXP_V1.4

Tomcat PUT Method Arbitrary File Write (CVE-2017-12615) Graphical Exploitation Tool

Vulnerability Introduction

On September 19, 2017, Apache Tomcat officially confirmed and fixed two high-risk vulnerabilities, with CVE IDs: CVE-2017-12615 and CVE-2017-12616. Among them, the remote code execution vulnerability (CVE-2017-12615) affects: Apache Tomcat 7.0.0 - 7.0.79 (incompletely fixed in 7.0.81)

When Tomcat is running on a Windows host and the HTTP PUT request method is enabled (for example, by setting the readonly initialization parameter from its default value to false), an attacker can upload a JSP file containing arbitrary code to the server through a carefully crafted attack request. Subsequently, the code in the JSP file can be executed by the server.

Tool Introduction

• Vulnerability Detection

  Detect whether the target site has the Tomcat PUT method arbitrary file write vulnerability (CVE-2017-12615)

  

• Command Execution

  Execute operating system commands

  

• File Upload

  Default upload of Godzilla webshell, customizable webshell content and upload filename