Confluence CVE 2021,2022,2023 利用工具,支持命令执行,哥斯拉,冰蝎 内存马注入
- 支持 Confluence 版本:CVE-2021-26084,CVE-2022-26134,CVE_2023_22515,CVE-2023-22527
- (如果对您有帮助,感觉不错的话,请您给个大大的 ⭐️❗️)
- 哥斯拉默认密码:pass ,默认key:key ,请求配置 - 协议头 需加上
Connection: close
- 冰蝎默认密码:rebeyond,默认UA:Accept-Language:zh-CN,zh;q=0.95,n-AS,fr-RF
- 只有 CVE-2022-26134 版本支持哥斯拉,冰蝎自定义密码,其他版本都是默认密码
V1.1版本
- 新增 CVE_2023_22515,用户创建,内存马注入,基于 CmdShell 的命令执行
- table 双击复制当前行,shell路径,key,ua
- 哥斯拉 memshell 地址:url+/plugins/servlet/com/atlassian/TeamManageServlet
- 哥斯拉默认密码:pass ,默认key:key ,请求配置 - 协议头 需加上
Connection: close
- CmdShell 地址:url+/plugins/servlet/com/atlassian/TeamManageServlet?team=whoami
- 创建用户
![image](https://private-user-images.githubusercontent.com/63742814/300168439-ced702d4-c8bf-4b97-bc2c-00e298b69d20.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.o-RpKxl3_1HOZuQoLN5cHoPjqX0SMh0cHUCQ0rdQqpA)
- 成功创建
![image](https://private-user-images.githubusercontent.com/63742814/300167255-ae4d1a0c-bd45-49aa-9107-563898954c4f.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.gmRTsQW6fxu1Jk78qwjZilDsP-BqBh7eoZ1WMPusFRY)
- 生成恶意插件 Jar 包(包含哥斯拉,和CmdShell)
![image](https://private-user-images.githubusercontent.com/63742814/300168491-72774447-7fd1-4a75-81a2-fbc3bfa214b0.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjQ2Njk1MjAsIm5iZiI6MTcyNDY2OTIyMCwicGF0aCI6Ii82Mzc0MjgxNC8zMDAxNjg0OTEtNzI3NzQ0NDctN2ZkMS00YTc1LTgxYTItZmJjM2JmYTIxNGIwLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MjYlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODI2VDEwNDcwMFomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTEzMGM3ZmM5NmRmZmNlMjUwMzgyYzZkZjAxYWQxZTYzMzZlNjZiMjhmNjY4NjI4NTNiYTFmMGJlODBjYTUzY2ImWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.iSJOljFbpku64Hnk7NwMmS7UO8wPlHE9xaOU0UWjb7w)
- 显示内存马地址,和pass:key(双击复制,shell路径,key,ua)
![image](https://private-user-images.githubusercontent.com/63742814/300167378-621f2e34-4055-48d8-995e-559fdb056ebf.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.COB_7KV7HeL4ZXgEaGID6MEqk_yW7pW-4dQTIIX1GsM)
- 用创建的用户进后台,插件功能地址: url+/plugins/servlet/upm,上传插件(不用等传完,直接刷新就有了。)
![image](https://private-user-images.githubusercontent.com/63742814/300167589-694e70af-cd88-4bac-958e-fe4c55d2e414.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Sjs66uPCVG0Koi71NtpPkSeDGvyMNHjIAjpFK345h-g)
- 哥斯拉连接
![image](https://private-user-images.githubusercontent.com/63742814/300167658-55bbc76a-33cc-466c-b84f-331fa5de6bbd.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.QYNu4-Szrr1L6EyAypTQgyF_llvITyq0qX3k8C_JGak)
- 基于插件 CmdShell 命令执行
![image](https://private-user-images.githubusercontent.com/63742814/300167750-654ca5a9-85a3-4fdf-b994-06fffc8d10f8.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rjKP4xjgy9rDZqoj3pRLZst2XlDppe33UqQ9eF8OV7A)
V1.0
- 命令执行(其他 CVE 版本同理)
![image](https://private-user-images.githubusercontent.com/63742814/299994269-ebbad08a-994c-4717-818a-721f24250119.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.mFxbeDDXmNrFFNSnQUQt0j7pS6kiz_KI9R9DjJ7VT54)
- 内存马注入(其他 CVE 版本同理)
- 哥斯拉
![image](https://private-user-images.githubusercontent.com/63742814/299998019-b7221eaa-d7d5-4fce-ba77-d3f1969b492a.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.paBm4dsrtcFJWIWyElThmUmuDOWVnCvh6Oh_dUzoiGY)
![image](https://private-user-images.githubusercontent.com/63742814/299994952-0cc1c2cf-b0b8-43f0-8b18-9d3333824cef.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjQ2Njk1MjAsIm5iZiI6MTcyNDY2OTIyMCwicGF0aCI6Ii82Mzc0MjgxNC8yOTk5OTQ5NTItMGNjMWMyY2YtYjBiOC00M2YwLThiMTgtOWQzMzMzODI0Y2VmLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MjYlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODI2VDEwNDcwMFomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTBkMDE4ZTRiNGUyNWVkY2U3NzkwMjZhYzJhMmRhNDg1OGZlNGNhNWQyZDE3OWMxMDJlODhiMjE0YWJlODRiMmMmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.EjlUVuieV--xnjoi0fvW-Rk2hs7kJhRNnApn-UoMREA)
- 冰蝎
![image](https://private-user-images.githubusercontent.com/63742814/300004229-21861463-c3ba-41f5-a7a7-9249758eb8e3.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.gBxmZ_eE5OHsZC9L4P-Pj4tbgB1NEkdLvUDPcCQOO_s)
![image](https://private-user-images.githubusercontent.com/63742814/299998513-d95dd5c7-6843-4c3c-aac7-bb3147e32005.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NvAoCzHX8ZqPYGRH5aYj54W3YBBq3gKTKnhFYwhhmkE)
参考
https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL https://github.com/aaaademo/Confluence-EvilJar
免责声明
本工具仅能在取得足够合法授权的企业安全建设中使用,在使用本工具过程中,您应确保自己所有行为符合当地的法律法规。
如您在使用本工具的过程中存在任何非法行为,您将自行承担所有后果,本工具所有开发者和所有贡献者不承担任何法律及连带责任。