Confluence-EvilJar — CVE-2023-22515와 함께 백엔드에서 jar 패키지를 업로드하여 RCE 구현 | Kitploit

aaaademo/Confluence-EvilJar

CVE-2023-22515와 함께 백그라운드에서 jar 파일을 업로드하여 RCE를 구현합니다.

git clone https://github.com/aaaademo/Confluence-EvilJar
cd Confluence-EvilJar
mvn package

http://confluence.local/plugins/servlet/testbin/cmServlet

http://confluence.local/plugins/servlet/testbin/gzServlet

Referer: https://www.baidu.com/

p@ssw0rd / key

Confluence-EvilJar