GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Java-Rce-Echo/Tomcat at master · J1ezds/Java-Rce-Echo

Expand file tree

/

Tomcat

/
Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History
History
 
 
/

Tomcat

/
Copy path

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
Java Object Searcher search result
Java Object Searcher search result
 
 
code
code
 
 
imgs
imgs
 
 
README.md
README.md
 
 

README.md

Outline

Tomcat 回显

2020.9.19 update

参考 xary 中的 tomcat 回显代码对代码逻辑进行优化,并参考 xray 的 tomcat 回显代码将 Tomcat6/7/8/8.5/9 回显代码合并为一个文件

使用 c0ny1 编写的 Java Object Searcher 挖掘结果

  • Tomcat 6 Tomcat 6 Serarch Result

  • Tomcat 7 Tomcat 7 Serarch Result

  • Tomcat 8 Tomcat 8 Serarch Result

  • Tomcat 8.5 Tomcat 8.5 Serarch Result

  • Tomcat 9 Tomcat 9 Serarch Result

效果

Tomcat 9 Echo

参考

  • https://github.com/c0ny1/java-object-searcher/
  • 半自动化挖掘request实现多种中间件回显
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.