HackTheBox Writeup: Jerry

This blog post contains my writeup for HackTheBox’s Jerry. This machine was about Apache Tomcat and Arbitrary File uploads.

Table of Contents

• Reconnaissance
• Apache Tomcat
• Exploiting Arbitrary File Upload

Reconnaissance

I started off by checking the connection to the Jerry box, (10.10.10.95 in this case).

$ ping 10.10.10.95

I verified the connection with Ping. I then used Nmap to check the open ports and services using,

$ nmap -sC -sV -Pn 10.10.10.95

One service was discovered on port 8080. …

apache blog blog post box case check cybersecurity file hacking hackthebox machine nmap open ports ping ports services tomcat verified windows writeup