Posts on: Java

---

Apache Tomcat is the reference implementation of Jakarta Servlet, Jakarta Pages, and Jakarta WebSocket — it is the default Java application server for millions of deployments, and it ships inside countless appliances, CI/CD tools, and management consoles that developers do not realise are running Tomcat under the hood. For an attacker, Tomcat is valuable for three reasons: the Manager and Host Manager web applications deploy arbitrary WAR files (immediate RCE), the AJP connector on port 8009 is frequently exposed and still exploitable via Ghostcat, and the path normalisation difference between a reverse proxy and Tomcat enables authentication and security-constraint bypass.

WebSphere is a Java EE application server provided by IBM, used to deploy and manage enterprise-level Java applications. Discovery & Fuzzing Fuzz for IBM WebSphere specific endpoints using this wordlist: https://github.com/kkrypt0nn/wordlists/blob/main/wordlists/vulnerabilities/websphere.txt Fuzz for files with the following extensions: *.do *.jsp *.jsv *.jsw Missing Authorization in administrative servlets You may find some interesting administrative endpoints lacking authentication. One particular endpoint is the snoop servlet, typically located at the server’s webroot: https://example.com/snoop/

Introduction SAP system consists of a number of fully integrated modules, which covers virtually every aspect of business management. The product is marketed as a service-oriented architecture for enterprise application integration. It can be used for custom development and integration with other applications and systems, and is built primarily using the ABAP programming language, but also uses C, C++, and Java. It can also be extended with, and interoperate with, technologies such as Microsoft .NET, Java EE, and IBM WebSphere.