Vulnerabilities

GlassFish

Ports

• 4848 - HTTP
• 8080 - HTTP
• 8181 - HTTPS

Credentials

• Username: admin
• Password: vagrant

Access

• On Metasploitable3, point your browser to http://localhost:4848.
• Login with the above credentials.

Start/Stop

• Stop: Open task manager and kill the java.exe process running glassfish
• Start: Go to Task Scheduler and find the corresponding task. Right-click and select Run.

Vulnerabilities

Modules

• exploits/multi/http/glassfish_deployer
• auxiliary/scanner/http/glassfish_login

Apache Struts

Tomcat

Jenkins

IIS

psexec

SSH

WinRM

chinese caidao