diff --git a/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp.md b/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp.md index 851e91d8..45cb5301 100644 --- a/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp.md +++ b/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp.md @@ -108,6 +108,8 @@ Module options (exploit/multi/http/tomcat_mgr_deploy): ### Nginx Reverse Proxy & AJP +[Checkout the Dockerized version](#Dockerized-version) + When we come across an open AJP proxy port (8009 TCP), we can use Nginx with the `ajp_module` to access the "hidden" Tomcat Manager. This can be done by compiling the Nginx source code and adding the required module, as follows: * Download the Nginx source code @@ -182,6 +184,19 @@ curl http://127.0.0.1:80 ``` +### Dockerized-version + +```bash +git clone https://github.com/ScribblerCoder/nginx-ajp-docker +cd nginx-ajp-docker +``` +Replace `TARGET-IP` in `nginx.conf` witg AJP IP then build and run +``` bash +docker build . -t nginx-ajp-proxy +docker run -it --rm -p 80:80 nginx-ajp-proxy +``` + + ## References * [https://academy.hackthebox.com/module/145/section/1295](https://academy.hackthebox.com/module/145/section/1295)