Confluence CVE 2021,2022,2023 利用工具,支持命令执行,哥斯拉,冰蝎 内存马注入
- 支持 Confluence 版本:CVE-2021-26084,CVE-2022-26134,CVE_2023_22515,CVE-2023-22527
- (如果对您有帮助,感觉不错的话,请您给个大大的 ⭐️❗️)
- 哥斯拉默认密码:pass ,默认key:key ,请求配置 - 协议头 需加上
Connection: close
- 冰蝎默认密码:rebeyond,默认UA:Accept-Language:zh-CN,zh;q=0.95,n-AS,fr-RF
- 只有 CVE-2022-26134 版本支持哥斯拉,冰蝎自定义密码,其他版本都是默认密码
V1.1版本
- 新增 CVE_2023_22515,用户创建,内存马注入,基于 CmdShell 的命令执行
- table 双击复制当前行,shell路径,key,ua
- 哥斯拉 memshell 地址:url+/plugins/servlet/com/atlassian/TeamManageServlet
- 哥斯拉默认密码:pass ,默认key:key ,请求配置 - 协议头 需加上
Connection: close
- CmdShell 地址:url+/plugins/servlet/com/atlassian/TeamManageServlet?team=whoami
- 创建用户
![image](https://private-user-images.githubusercontent.com/63742814/300168439-ced702d4-c8bf-4b97-bc2c-00e298b69d20.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EJHfBTxtVRL-2AtvVxKSd80orCDRvawZ3pN7hYQLg0A)
- 成功创建
![image](https://private-user-images.githubusercontent.com/63742814/300167255-ae4d1a0c-bd45-49aa-9107-563898954c4f.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vZ36eBsRbthYjIbWd7A4VrasbcaAET0836n0do7vKyE)
- 生成恶意插件 Jar 包(包含哥斯拉,和CmdShell)
![image](https://private-user-images.githubusercontent.com/63742814/300168491-72774447-7fd1-4a75-81a2-fbc3bfa214b0.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yHr-vWIzJJwBOQXkKwLaBdUh_BNGusjhBEAbaYVAhDI)
- 显示内存马地址,和pass:key(双击复制,shell路径,key,ua)
![image](https://private-user-images.githubusercontent.com/63742814/300167378-621f2e34-4055-48d8-995e-559fdb056ebf.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.OXY7xxyWlGp4KiTPu8CajMR6bbEHPCbBAdd_P4dzL_4)
- 用创建的用户进后台,插件功能地址: url+/plugins/servlet/upm,上传插件(不用等传完,直接刷新就有了。)
![image](https://private-user-images.githubusercontent.com/63742814/300167589-694e70af-cd88-4bac-958e-fe4c55d2e414.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.dlbw8LoyYIAlCqoBxCCbcL9cNs2lU8ncaRJn_rnVa-c)
- 哥斯拉连接
![image](https://private-user-images.githubusercontent.com/63742814/300167658-55bbc76a-33cc-466c-b84f-331fa5de6bbd.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.cr0N05cDgt_b0bxIlB9XzEq9ztUNmIY2EW-2tQcnn9o)
- 基于插件 CmdShell 命令执行
![image](https://private-user-images.githubusercontent.com/63742814/300167750-654ca5a9-85a3-4fdf-b994-06fffc8d10f8.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.gFzgZIrZCw4hCe-y1zvIq7xczUISsVCUw5fVziuRiVc)
V1.0
- 命令执行(其他 CVE 版本同理)
![image](https://private-user-images.githubusercontent.com/63742814/299994269-ebbad08a-994c-4717-818a-721f24250119.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.gzivDdWCw4I8rZhy2meHXw0XMglBDXFDtq33zceCHMc)
- 内存马注入(其他 CVE 版本同理)
- 哥斯拉
![image](https://private-user-images.githubusercontent.com/63742814/299998019-b7221eaa-d7d5-4fce-ba77-d3f1969b492a.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.jjNITu92boZ4aDh2bFlVY0WYGj8U_mhX7AEk9VxC-5U)
![image](https://private-user-images.githubusercontent.com/63742814/299994952-0cc1c2cf-b0b8-43f0-8b18-9d3333824cef.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.bZlrfW4qmDNvufyCFny7rqF04rgNCwCcM6cZDQEMGlk)
- 冰蝎
![image](https://private-user-images.githubusercontent.com/63742814/300004229-21861463-c3ba-41f5-a7a7-9249758eb8e3.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.lO62MPlSzGE8BRMo30UdRdGkO-vrvcbRAhAgeGvElfo)
![image](https://private-user-images.githubusercontent.com/63742814/299998513-d95dd5c7-6843-4c3c-aac7-bb3147e32005.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JPQzWAzqD54DCCeASCU78IvxXNXiJZj9aLGl0nBllEQ)
参考
https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL https://github.com/aaaademo/Confluence-EvilJar
免责声明
本工具仅能在取得足够合法授权的企业安全建设中使用,在使用本工具过程中,您应确保自己所有行为符合当地的法律法规。
如您在使用本工具的过程中存在任何非法行为,您将自行承担所有后果,本工具所有开发者和所有贡献者不承担任何法律及连带责任。