hacktricks
hacktricks copied to clipboard
Neccessary Package no Longer Available on Kali
https://book.hacktricks.xyz/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp
The package "libapache2-mod-jk" is no longer available in Kali Linux. It's necessary for the "AJP Proxy" section. My workaround was downloading it from a Debian repo here: https://packages.debian.org/buster/libapache2-mod-jk
sudo apt-get install libapache2-mod-jk
sudo vim /etc/apache2/apache2.conf # append the following line to the config
Include ajp.conf
sudo vim /etc/apache2/ajp.conf # create the following file, change HOST to the target address
ProxyRequests Off
<Proxy *>
Order deny,allow
Deny from all
Allow from localhost
</Proxy>
ProxyPass / ajp://HOST:8009/
ProxyPassReverse / ajp://HOST:8009/
sudo a2enmod proxy_http
sudo a2enmod proxy_ajp
sudo systemctl restart apache2
According to this page the package was removed from Kali Rolling and Dev in August 2022 https://pkg.kali.org/pkg/libapache-mod-jk
Full disclosure I am kind of a noob, so I'm not sure if this is the optimal workaround, but it did get everything working for me.