search

Anemone95 / anemone95.github.io

http://anemone.top/
2 stars 1 forks source link

Solr DataImportHandler RCE(CVE-2019-0193)漏洞分析 | Anemone's Blog #68

Open Anemone95 opened 4 years ago

Anemone95 commented 4 years ago

https://anemone.top/vulnresearch-Solr_DataImportHandler_RCE/

环境搭建先到solr上下载jar和src，这里选择的版本为v8.1.0https://archive.apache.org/dist/lucene/solr/8.1.0/solr-8.1.0.zip运行远程调试1234anemone@ANEMONE-ASUS:/mnt/d/Store/document/all_my_work/solr/solr-8.1.0$ cd server/ #一定要再ser