Apache Tomcat 8.0 with the Manager application open to remote addresses and an account with a weak password: guessing the credentials gives access to /manager/html, where uploading a WAR file deploys a JSP shell.
Not startedDockercommit 1f966b7x86_64 · aarch64Secret
Get into the Tomcat Manager, deploy a WAR file and get a shell on the server.
The brief for this lab lives in its repository.