Sploitus

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq

gitee · 2020-08-27

Exploit Code

MARKDOWN8 lines
## https://sploitus.com/exploit?id=96FCACE1-F47F-5151-A41D-6901DC5DF581
This is a collection of proof-of-concept (PoC) exploits and tools for various vulnerabilities. The repository contains several files, including a Gitignore file, a Python script, and a PNG image. The Python script is a tool for exploiting a vulnerability in Apache ActiveMQ, specifically the CVE-2016-3088 vulnerability. The script takes several arguments, including the URL of the ActiveMQ server, the username, and the password. It then uses these credentials to upload a shell to the server and execute it. The PNG image appears to be a screenshot of the script in action. 

The vulnerability being exploited is a remote code execution (RCE) vulnerability in Apache ActiveMQ, which allows an attacker to execute arbitrary code on the server. The script uses the `requests` library to send a request to the ActiveMQ server, which includes the uploaded shell. The shell is then executed on the server, allowing the attacker to gain remote access to the server.

The script is written in Python and uses the `requests` library to send HTTP requests to the ActiveMQ server. The script takes several arguments, including the URL of the ActiveMQ server, the username, and the password. It then uses these credentials to authenticate with the server and upload the shell.

The PNG image appears to