Course
This course explores the exploitation of a vulnerability in Apache Pluto 3.0.0, specifically CVE-2018-1306. The vulnerability allows an attacker to upload a webshell by manipulating the HTTP method, bypassing access controls.
Skills covered
Injection
Authentication
Operating System
Network
CWE-200
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.