https://mrbeetrootpwn.com/tags/apache-tomcat/Recent content in Apache Tomcat on CyberSec WriteupsHugoen-usFri, 28 Nov 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-tabby/Fri, 28 Nov 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-tabby/Linux machine using an LFI to leak Tomcat manager credentials for a WAR-based shell, cracking a reused backup password, and abusing LXD group membership to mount the host filesystem for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-jerry/Thu, 17 Jul 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-jerry/Windows machine exploiting default Apache Tomcat manager credentials to deploy a malicious WAR file and get an immediate SYSTEM shell.