CompTIA
PT0-001 · Question #226
A penetration tester has discovered through automated scanning that a Tomcat server allows for the use of default credentials. Using default credentials, the tester is able to upload WAR files to…
The correct answer is D. Install web shell on the server. https://pentestlab.blog/2012/03/22/apache-tomcat-exploitation/
Post-exploitation and lateral movement
Question
A penetration tester has discovered through automated scanning that a Tomcat server allows for the use of default credentials. Using default credentials, the tester is able to upload WAR files to the server. Which of the following is the MOST likely post-exploitation step?
Options
- AUpload a customized /etc/shadow file.
- BMonitor network traffic
- CConnect via SSH using default credentials.
- DInstall web shell on the server.
How the community answered
(17 responses)- A6% (1)
- B6% (1)
- D88% (15)
Explanation
https://pentestlab.blog/2012/03/22/apache-tomcat-exploitation/
Topics
#Tomcat#default credentials#WAR file upload#web shell
Community Discussion
No community discussion yet for this question.