티스토리 뷰
1. Tomcat Manager Port 활성화 시키기
- 이클립스의 Server Overview 메뉴 에서 Server Location 값을 Use Tomcat installation 으로 변경,
- Tomcat User 등록하기
. 톰캣 설치 디렉토리( C:\개발업무\공통 라이브러리\apache-tomcat-7.0.22\conf\ ) 와
이클립스 프로젝트 내 톰캣 설정 디렉토리에서 (C:\개발업무\Workspace\MyProject\Servers\Tomcat v7.0 Server at localhost-config)
에서 tomcat-users.xml 내용 수정
<tomcat-users>
<role rolename="tomcat"/>
<role rolename="manager"/>
<role rolename="manager-gui"/>
<role rolename="admin"/>
<role rolename="admin-gui"/>
<user roles="tomcat,manager,manager-gui,admin,admin-gui" password="tomcat" username="tomcat"/>
</tomcat-users>
위 설정을 맞추고 각자 Local Server 의 Http 서비스 포트의 /manager 로 접속하면 된다.
(ex. http://127.0.0.1:9090/manager)
위 설정대로 했는데도 아래와 같은 에러가 나타난 다면 해메지 말고 그냥 이클립스에서 Server 를 날리고 새로 잡아주자.
직접 해보고 하는 말이다. 날리고 새로 하는게 정신건강에 이롭다.
403 Access Denied
You are not authorized to view this page.
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Error instantiating servlet class org.apache.catalina.manager.HTMLManagerServlet org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100) org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:929) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:405) org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:964) org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:515) org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:302) java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) java.lang.Thread.run(Unknown Source)
root cause
java.lang.SecurityException: Restricted (ContainerServlet) class org.apache.catalina.manager.HTMLManagerServlet org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:581) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100) org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:929) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:405) org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:964) org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:515) org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:302) java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) java.lang.Thread.run(Unknown Source)
note The full stack trace of the root cause is available in the Apache Tomcat/7.0.22 logs.
Apache Tomcat/7.0.22
404 Not found
The page you tried to access (/manager/html) does not exist.
The Manager application has been re-structured for Tomcat 7 onwards and some of URLs have changed. All URLs used to access the Manager application should now start with one of the following options:
- /manager/html for the HTML GUI
- /manager/text for the text interface
- /manager/jmxproxy for the JMX proxy
- /manager/status for the status pages
Note that the URL for the text interface has changed from "/manager" to "/manager/text".
You probably need to adjust the URL you are using to access the Manager application. However, there is always a chance you have found a bug in the Manager application. If you are sure you have found a bug, and that the bug has not already been reported, please report it to the Apache Tomcat team.
2. PSI - Probe 설치하기
- http://psi-probe.googlecode.com/ 에서 설치파일 다운로드
- 톰캣 설치 디렉토리(C:\개발업무\공통 라이브러리\apache-tomcat-7.0.22\webapps) 에 probe 디렉토리 만들고 관련 파일 압축 해제
- 톰캣 재시작 후 /probe 경로로 접속
3. Tomcat 에서 Psi-Probe 배포하기
- http://host/manager 로 접속
- Deploy 메뉴에서 probe.war 경로와 접속 경로(Context Path) 를 설정하고 Deploy 해주면 됨
ex) War URL = /nds/apache-tomcat-7.0.16/webapps/probe.war
ex) Context Path = /probe
4. Psi-Probe 항목 살펴보기
작성 중..
- Total
- Today
- Yesterday
- OpenSSL
- BASE64
- ssh
- SSL
- tar
- OverTheWire
- Linux
- Strings
- 32bit
- Bandit
- natas7
- over the wire
- HTTPS
- 리터럴
- java
- 리눅스
- X32
- bz2
- 웹보안
- nc
- tr
- 압축파일
- grep
- solution
- 웹보안공부
- 풀이
- Encode
- gz
- Natas
- find
일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | |||||
3 | 4 | 5 | 6 | 7 | 8 | 9 |
10 | 11 | 12 | 13 | 14 | 15 | 16 |
17 | 18 | 19 | 20 | 21 | 22 | 23 |
24 | 25 | 26 | 27 | 28 | 29 | 30 |