Comments (3)
DeEpinGh0st
commented on June 26, 2024
6
-
复现可以使用Xray，具体可到Xray下载
测试命令如下：
xray webscan --url http://x.x.x.x:8999/frp/a/login --plugins shiro如果出现
说明有漏洞 -
关于是否影响到宿主机
如果使用docker版本过低，可能会产生Docker逃逸漏洞
具体可参考：
Docker逃逸
from frpmgr.
Zo3i
commented on June 26, 2024
6
再次感谢，目前已经修复。
from frpmgr.
Zo3i
commented on June 26, 2024
感谢反馈安全漏洞。我已经升级了shiro到1.7.0版本。我查了一下shiro1.2.4之前的版本才有反序列化的漏洞。但我之前使用的是1.4.0的版本。由于不知道如何复现安全漏洞，如果还存在问题还请不吝赐教。还有我使用的是docker容器，不知道本次攻击是否能影响到宿主机。
from frpmgr.
Related Issues (20)
- 安装完之后，如何删除？ HOT 1
- 本人demo开放 HOT 5
- 请问能否自定义mysql账户密码数据库名 HOT 1
- 在Web管理中添加FRP服务器时出现错误 HOT 5
- 可以不使用docker直接运行吗 HOT 11
- centos7 服务重启之后，docker-composer up启动不了 HOT 3
- 感谢作者的努力，刚部署成功了，提点优化建议。 HOT 1
- Centos7部署报错 HOT 1
- 启动失败 HOT 1
- 初始化数据源失败 HOT 2
- Windows server有办法进行使用吗 HOT 1
- 服务端在云服务器上，非root账号安装问题 HOT 1
- 一键部署运行报错 HOT 4
- 腾讯云报毒😂 HOT 1
- 大佬 安装后 docker 内部端口映射不出来 无法访问 容器无法获取IP HOT 1
- docker arm64 能否开发支持？ HOT 5
- docker的java8被删了 HOT 1
- 请问能够支持sqlite吗 HOT 1
- 一点建议&遇到的问题 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from frpmgr.