admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-06 10:41:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Consul/Consul_Service_API_RCE/README.md
gobysec ebd9b74e44 add Consul_Service_API_RCE
2021-07-16 10:22:41 +08:00

425 B
Raw Blame History

Consul Service API RCE

Under a specific configuration, a malicious attacker can remotely execute commands on the Consul server without authorization by sending a carefully constructed HTTP request.

FOFA query rule: title="Consul by HashiCorp" || protocol="consul(http)"

Demo