XSS Tomcat cal2.jsp - who can help?

Question

Java

I decided to do a little research on the security of web and application servers
I decided to start small
https://www.exploit-db.com/exploits/30563/
These are ancient versions of the tomket, but for some reason I, as a system administrator and not a programmer, can’t blind anything in a sensible request , neither the ls system call nor loading, for example, the remote shell i8jesus.com/stuff/pwnshell/pwn.jsp
I will be glad if someone helps with examples to deal with the issue
For these purposes, the server raised 178.175.139.233/jsp-examples/cal/cal2. jsp

Answer 1

XSS has nothing to do with a system call and a shell friend - because XSS is entirely executed on the client. All you can do is steal cookies or a session ID, or use XSS in conjunction with CSRF with the admin to force the administrator to secretly perform the necessary actions (if there is an admin, of course). But that's a completely different story