Testbed for CVE-2017-12617 - Apache Tomcat RCE Via JSP Upload

[LeonardoE95]

Hello there,

this PR contains the testbed for CVE-2017-12617.

[LeonardoE95]

@LeonardoE95 Could you add a docker config for a secure version of tomcat?

We test the plugin against secure and insecure version of the same service, to test for false positives and false negatives.

The same Dockerfile can be built to obtain vulnerable and non-vulnerable version of the same service (Tomcat).

Specifically, to build a vulnerable service the argument CONFIG must be set to vuln as shown below

docker build --build-arg CONFIG=vuln -t tomcat-vuln .

To build a non vulnerable service instead we can omit the CONFIG arg

docker build --build-arg -t tomcat .

The idea is that by default they use the same config, but when built with the CONFIG=vuln, the config is changed to make it vulnerable.

Hope it was clear, if you need more specific deployment setup let me know and I will add it.