CVE-2009-3548

This Metasploit module exploits Apache Tomcat Manager's authenticated file upload functionality to deploy a malicious WAR archive containing a JSP payload, achieving remote code execution. It handles CSRF tokens and session management to bypass protections.

This Metasploit module exploits Apache Tomcat's Manager application by uploading a malicious WAR archive containing a JSP payload via PUT request, achieving authenticated remote code execution. It supports automatic target detection and cleanup by undeploying the malicious application post-exploitation.