Sf integrated management platform server loss

1. The site is a comprehensive management platform
Http: // 219.134.187.150/loginmgmt/index. action

2. It is a jboss hole. You can remotely load the war package to obtain the shell;
3. The jboss background does have a password, but it can be bypassed:

1. Connect the kitchen knife and run the following command:

2. It seems that many applications are running on this server.

3. Another backdoor is found. Please delete it in time:




 

Solution:
This background of jboss cannot be used, so you can cut it!