lca

The document discusses the exploitation of the Jerry machine on Hack The Box, which simulates a scenario involving an exposed Apache Tomcat server. 1. **Port Scanning**: An Nmap scan reveals open ports on the target IP (10.10.10.95). 2. **Service Identification**: The server is identified as running Apache Tomcat. 3. **Web Application Manager Path**: The path to the Tomcat Web Application Manager is found to be `/manager/html` using directory scanning. 4. **Credentials**: The valid username and password for accessing the manager are `tomcat:s3cret`. 5. **Deployable File Type**: The server accepts WAR files for deployment. 6. **Shell Access**: A reverse shell is created using a WAR file, allowing access to the server. 7. **Flag Retrieval**: Two flags are obtained: a user flag (`7004dbcef0f854e0fb401875f26ebd00`) and a root flag (`04a8b36e1545a455393d067e772fe90e`). The document also mentions potential file reading vulnerabilities related to AJP.