Add a new doc for jboss_vulnscan

master
Wei Chen 2019-03-05 11:20:59 -06:00
parent 2caf98c4d0
commit e10668c0e8
1 changed files with 20 additions and 0 deletions

View File

@ -0,0 +1,20 @@
## Description
This module scans a JBoss instance for a few vulnerabilities.
## Vulnerable Software
The JBoss Enterprise Application Platform (or JBoss EAP) is a
subscription-based/open-source Java EE-based application
server runtime platform used for building, deploying, and
hosting highly-transactional Java applications and services
This module has been successfully tested on:
* Apache-Coyote/1.1 ( Powered by Servlet 2.4; JBoss-4.2.0.GA (build: SVNTag=JBoss_4_2_0_GA date=200705111440)/Tomcat-5.5 )
## Verification Steps
1. Do: ```use auxiliary/scanner/http/jboss_vulnscan```
2. Do: ```set RHOSTS [IP]```
3. Do: ```run```