Awesome Open Source
Awesome Open Source

Apache Solr <=8.2.0 Velocity Template 0day Exploit

Exploit: https://awesomeopensource.com/project/k8gege/SolrExp
Cscan: https://awesomeopensource.com/project/k8gege/K8CScan

环境

下载Solr 8.2.0添加core,默认配置即可。7.x版本自带core

配置

0x001 批量URL配置Cscan.ini
[Cscan]
exe=F:\Python279\python.exe
arg=exp.py $ip$ whoami
0x002 批量C段配置Cscan.ini
[Cscan]
exe=F:\Python279\python.exe
arg=exp.py http://$ip$:8983 whoami

利用

单个: python exp.py url cmd
或 Cscan url
批量C段: Cscan 192.168.1.8/24
批量URL: Cscan (同目录放url.txt)


Get A Weekly Email With Trending Projects For These Topics
No Spam. Unsubscribe easily at any time.
Python (1,137,610
Apache (1,240
Exploit (1,087
Solr (457
Rce (168
Related Projects