{"action":"created","issue":{"url":"https://api.github.com/repos/hatRiot/clusterd/issues/36","labels_url":"https://api.github.com/repos/hatRiot/clusterd/issues/36/labels{/name}","comments_url":"https://api.github.com/repos/hatRiot/clusterd/issues/36/comments","events_url":"https://api.github.com/repos/hatRiot/clusterd/issues/36/events","html_url":"https://github.com/hatRiot/clusterd/issues/36","id":63260021,"number":36,"title":"Unsuccessful deployment","user":{"login":"antoniosanchezc","id":6860692,"avatar_url":"https://avatars.githubusercontent.com/u/6860692?v=3","gravatar_id":"","url":"https://api.github.com/users/antoniosanchezc","html_url":"https://github.com/antoniosanchezc","followers_url":"https://api.github.com/users/antoniosanchezc/followers","following_url":"https://api.github.com/users/antoniosanchezc/following{/other_user}","gists_url":"https://api.github.com/users/antoniosanchezc/gists{/gist_id}","starred_url":"https://api.github.com/users/antoniosanchezc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antoniosanchezc/subscriptions","organizations_url":"https://api.github.com/users/antoniosanchezc/orgs","repos_url":"https://api.github.com/users/antoniosanchezc/repos","events_url":"https://api.github.com/users/antoniosanchezc/events{/privacy}","received_events_url":"https://api.github.com/users/antoniosanchezc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-03-20T16:34:11Z","updated_at":"2015-03-20T17:25:58Z","closed_at":null,"body":"Hi,\r\n\r\nFirst of all, congrats for the awesome tool.\r\n\r\nI'm doing an internal pentest at the moment, and I've found a JBoss 5.1.0 GA which in theory is vulnerable to the invoker/JMXInvokerServlet and invoker/EJBInvokerServlet vulnerability. At first I tried to exploit it using the metasploit module, and then a similar PHP exploit I found on EDB, but both were failing for some reason. As I'm already domain admin, I could log to the box and see the logs, it turns out it was complaining about the remote .war file I was trying to upload and deploy, as it was hosted on my own web server. After doing some research I found this article: http://breenmachine.blogspot.co.uk/2014/02/jboss-jbxinvoker-servlet-update.html which comes to say that JBoss >= has a bug/feature that stops remote objects from being deployed. I read his post, compiled the Java exploit and ran it. It did upload my .war file to the folder /management (...management/cmd.war), but for some reason it seems as if it doesn't deploy it!!.\r\n\r\nAfter that, I found this project, gave it a go, and the result is the same, your tool does upload the .war file, but it is never deployed for some reason I can't understand!.\r\n\r\nAny ideas?"},"comment":{"url":"https://api.github.com/repos/hatRiot/clusterd/issues/comments/84079339","html_url":"https://github.com/hatRiot/clusterd/issues/36#issuecomment-84079339","issue_url":"https://api.github.com/repos/hatRiot/clusterd/issues/36","id":84079339,"user":{"login":"antoniosanchezc","id":6860692,"avatar_url":"https://avatars.githubusercontent.com/u/6860692?v=3","gravatar_id":"","url":"https://api.github.com/users/antoniosanchezc","html_url":"https://github.com/antoniosanchezc","followers_url":"https://api.github.com/users/antoniosanchezc/followers","following_url":"https://api.github.com/users/antoniosanchezc/following{/other_user}","gists_url":"https://api.github.com/users/antoniosanchezc/gists{/gist_id}","starred_url":"https://api.github.com/users/antoniosanchezc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antoniosanchezc/subscriptions","organizations_url":"https://api.github.com/users/antoniosanchezc/orgs","repos_url":"https://api.github.com/users/antoniosanchezc/repos","events_url":"https://api.github.com/users/antoniosanchezc/events{/privacy}","received_events_url":"https://api.github.com/users/antoniosanchezc/received_events","type":"User","site_admin":false},"created_at":"2015-03-20T17:25:58Z","updated_at":"2015-03-20T17:25:58Z","body":"‎Yeah that's how I was looking at the logs, as I do have access to the box, but do not know valid creds for the JMX-Console. There are not errors at all when I use your tool or the Java Version,as the upload‎ is successful, but it doesn't get deploy... I just got off the client's office, I'll be back on Monday and see what I can do, I have to find out what's going on!\n\nFrom: Stephen Breen\nSent: Friday, 20 March 2015 17:03\nTo: hatRiot/clusterd\nReply To: hatRiot/clusterd\nCc: Antonio Sánchez\nSubject: Re: [clusterd] Unsuccessful deployment (#36)\n\n\n\nThe MSF module does things a little differently, they haverone and myse a hardcoded blob that gets sent over where we generate a version specific one on the fly. If you're trying to debug, I'd suggest running the Java code in a debugger and inspecting the objects at each step, especially the ones that come back from the server.\n\nIf you have full access to the box, you can monitor the JBoss trace log that gives full detail on whats going on, it's a text file on the server, I think it has more detail than what's in the web interface.\n\n—\nReply to this email directly or view it on GitHub<https://github.com/hatRiot/clusterd/issues/36#issuecomment-84068288>.\n\n______________________________________________________________________\nThis email has been scanned by the Symantec Email Security.cloud service.\nFor more information please visit http://www.symanteccloud.com\n______________________________________________________________________\n\n______________________________________________________________________\n\nDisclaimer: This e-mail and any attachments are confidential.\n\nIt may contain privileged information and is intended for the named\naddressee(s) only. It must not be distributed without Dionach Ltd consent.\nIf you are not the intended recipient, please notify the sender immediately and destroy this e-mail. \n\nAny unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Unless expressly stated, opinions in this e-mail are those of the individual sender, and not of Dionach Ltd.\n\nDionach Ltd, Unipart House, Garsington Road, Oxford, OX4 2PG Company Registration No. 03908168, VAT No. GB750661242\n\n______________________________________________________________________\n"}}