0x22bb
/
hacktricks
mirror of https://github.com/carlospolop/hacktricks.git
1
2
Fork 0
Code Releases Activity

Merge pull request #324 from heinosasshallik/patch-2 

Fix wording issue in tomcat.md
This commit is contained in:
Carlos Polop 2022-04-28 15:11:09 +01:00 committed by GitHub
parent 99f5ee1a98 44159285e5
commit 434dd79f52
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pentesting/pentesting-web/tomcat.md
View File

@ -85,7 +85,7 @@ The following example scripts that come with Apache Tomcat v4.x - v7.x and can b
### Path Traversal (..;/)
In some **vulnerable versions of Tomcat** you can access to protected directories in Tomcat using the path: `/..;/`
In some **[vulnerable configurations of Tomcat](https://www.acunetix.com/vulnerabilities/web/tomcat-path-traversal-via-reverse-proxy-mapping/)** you can access to protected directories in Tomcat using the path: `/..;/`
So, for example, you might be able to **access the Tomcat manager** page accessing: `www.vulnerable.com/lalala/..;/manager/html`