SSRF in Apache Axis 1.4

Repository contains two standalone Python exploit implementations for Apache Axis CVE-2019-0227, plus README documentation for each technique. It is not part of a larger exploit framework. The top-level README describes both approaches and usage. Code files are jsp-webshell/axis_exp.py and freemarker-exec/axis_exp_Freemarker.py. The JSP-webshell variant is a full remote code execution exploit that abuses /services/AdminService to deploy a malicious Axis service with a requestFlow handler of type org.apache.axis.handlers.LogHandler. That handler is configured to write attacker-controlled request content to ../webapps/ROOT/<random>.jsp. The script then POSTs JSP code to the newly deployed random service endpoint, causing the JSP webshell to be written to disk. Finally it verifies and uses the webshell via HTTP GET with parameter cmd to execute arbitrary OS commands. It supports random service and shell names, optional HTTP Basic authentication, single-command execution, and an interactive loop. This variant leaves a file artifact on the target. The Freemarker variant is a fileless RCE exploit. It also abuses /services/AdminService, but instead deploys a service whose className is freemarker.template.utility.Execute with allowedMethods=*. After successful deployment, it sends SOAP requests directly to /services/<random> invoking exec with an attacker-supplied command string. Command output is parsed from <execReturn> in the SOAP response. It supports optional HTTP Basic authentication, single-command execution, and an interactive loop. This variant is stealthier because it does not write a webshell, but it depends on freemarker.jar being present on the target. Overall purpose: automate exploitation of vulnerable Apache Axis 1.4 instances where remote administration is enabled, yielding arbitrary command execution. Main fingerprintable targets are the Axis AdminService endpoint, dynamically created service endpoints under /services/, the JSP shell path in the web root, and the target-side file path ../webapps/ROOT/<random>.jsp. The repository is a real exploit set, not merely documentation or a scanner.