Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
DaveYesland committed Apr 9, 2019
1 parent 755f7e2 commit d5d317b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion CVE-2019-0227/CVE-2019-0227.py
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++#
# Apache Axis 1.4 Remote Code Execution CVE-2019-0227 #
#https://rhinosecuritylabs.com/Application-Security/CVE-2019-0227-Expired-Domain-to-RCE-in-Apache-Axis #
# Author: David Yesland, Rhino Security Labs #
# Author: David Yesland @daveysec, Rhino Security Labs #
# This exploits Apache Axis < 1.4 to upload and execute a JSP payload using MITM #
# by forcing an http request using the default StockQuoteService.jws service. #
# You need to be on the same network as the Axis server to make this work. #
Expand Down

0 comments on commit d5d317b

Please sign in to comment.