CVE-2021-25646-exp

Apache Druid CVE-2021-25646 Remote Code Execution Vulnerability Detection and Exploitation Tool Input domain name or ip:port to perform vulnerability detection

For targets where the vulnerability is detected, command execution exploitation can be performed Supports single target Supports reading multiple targets line by line from a file

(Range Demonstration)

Vulnerability Detection

Exploitation, execute id command

Reverse Shell

Enclose the reverse shell command in double quotes, otherwise an error will occur After a slight delay, the reverse shell is successfully obtained