Hands-On Web Penetration Testing with Metasploit

The JBoss architecture (JBoss 5)

The JBoss architecture has changed gradually over the last few years and with each major release, new services have been added. In this chapter, we will look at an architectural overview of JBoss AS 5 and cover the exploitation part of the architecture in the JBoss exploitation section later in this chapter. To understand the JBoss AS architecture, refer to the following diagram:

We can divide the architecture into four main components, as follows:

• User applications: As the name suggests, this component handles user applications and contains the XML config files, Web Application Resource (WAR) files, and so ...