Exploiting Jboss with JexBoss

JexBoss is a tool for testing and exploiting vulnerabilities in the Jboss Application Server and other Java Application Servers (for example, WebLogic, Glassfish, Tomcat, and Axis2).

JexBoss can be downloaded from here:
https://github.com/joaomatosf/jexboss

How to do it...

We go to the directory in which we cloned our JexBoss and perform the following steps:

1. We install all of the requirements by using the following command:

 pip install -r requires.txt 

This can be seen in the following screenshot:

2. To view the help, we type the following command:

python jexboss.py -h 

The following screenshot shows the output of the preceding command:

3. To exploit a host, we simply type the following command...