hacktricks/pentesting/pentesting-web/jboss.md

# JBOSS

## Enumeration

The _/web-console/ServerInfo.jsp_ and _/status?full=true_ web pages often reveal **server details**.

You can expose **management servlets** via the following paths within JBoss (depending on the version): _/admin-console_, _/jmx-console_, _/management_, and _/web-console_. Default credentials are **admin**/**admin**. Upon gaining access, you can use available invoker servlets to interact with exposed MBeans:

* /web-console/Invoker (JBoss versions 6 and 7)
* /invoker/JMXInvokerServlet and /invoker/EJBInvokerServlet (JBoss 5 and prior)

**You can enumerate and even exploit a JBOSS service using** [**clusterd**](https://github.com/hatRiot/clusterd)****\
**Or using metasploit:**
`msf > use auxiliary/scanner/http/jboss_vulnscan`

### Exploitation

[https://github.com/joaomatosf/jexboss](https://github.com/joaomatosf/jexboss)

### Google Dork

```
inurl:status EJInvokerServlet
```
GitBook: [master] 351 pages and 442 assets modified 2020-07-15 15:43:14 +00:00			`# JBOSS`

			`## Enumeration`

			`The _/web-console/ServerInfo.jsp_ and _/status?full=true_ web pages often reveal server details.`

GitBook: [#2876] save 2021-11-30 16:46:07 +00:00			`You can expose management servlets via the following paths within JBoss (depending on the version): _/admin-console_, _/jmx-console_, _/management_, and _/web-console_. Default credentials are admin/admin. Upon gaining access, you can use available invoker servlets to interact with exposed MBeans:`
GitBook: [master] 351 pages and 442 assets modified 2020-07-15 15:43:14 +00:00
GitBook: [#2777] gitbookissooooo slow I cannot write 2021-10-18 11:21:18 +00:00			`* /web-console/Invoker (JBoss versions 6 and 7)`
			`* /invoker/JMXInvokerServlet and /invoker/EJBInvokerServlet (JBoss 5 and prior)`
GitBook: [master] 351 pages and 442 assets modified 2020-07-15 15:43:14 +00:00
GitBook: [#2876] save 2021-11-30 16:46:07 +00:00			`You can enumerate and even exploit a JBOSS service using [clusterd](https://github.com/hatRiot/clusterd)****\`
			Or using metasploit: `msf > use auxiliary/scanner/http/jboss_vulnscan`
GitBook: [master] 351 pages and 442 assets modified 2020-07-15 15:43:14 +00:00
			`### Exploitation`

			`[https://github.com/joaomatosf/jexboss](https://github.com/joaomatosf/jexboss)`

			`### Google Dork`

GitBook: [#2777] gitbookissooooo slow I cannot write 2021-10-18 11:21:18 +00:00			```
GitBook: [master] 351 pages and 442 assets modified 2020-07-15 15:43:14 +00:00			`inurl:status EJInvokerServlet`
			```