admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 09:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

add Apache_Nifi_Api_RCE

Browse Source
This commit is contained in:
tardc 2020-12-04 16:30:43 +08:00
parent 360a08fbdd
commit bd18387a54
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
NiFi/Api_RCE/Apache_Nifi_Api_RCE.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 629 KiB

11
NiFi/Api_RCE/README.md Normal file
View File

@ -0,0 +1,11 @@
# Apache NiFi Api RCE
This module uses the NiFi API to create an ExecuteProcess processor that will execute OS commands. The API must be unsecured (or credentials provided) and the ExecuteProcess processor must be available. An ExecuteProcessor processor is created then is configured with the payload and started. The processor is then stopped and deleted.
**Affected version**: Apache NiFi
**[FOFA](https://fofa.so/result?q=title%3D%22NiFi%22&qbase64=dGl0bGU9Ik5pRmki&file=&file=) query rule**: title="NiFi"
# Demo
![](Apache_NiFi_Api_RCE.gif)