Comments (4)
Hi @jbertman!
I don't have much knowledge about Durbo serialization format. What I did to construct response.bin. I configured reverse replication between AEM publish and AEM author instances on my test stand. Then I created node with JSP script on publish instance and launched reverse replication process. By sniffing traffic I created response.bin file. Later I checked that this file worked with script that mimics AEM server.
from aem-hacker.
Thanks for the pointer, @0ang3el! I'll give that a shot.
from aem-hacker.
I don't want to turn this into a support channel, but I'm having issues in even creating a reverse replicator that triggers on the content you have in the aem-rce sling script, hoping you can help.
I'm able to create the content without issue (using your script), and it works perfectly on the Publish instance, but I can't seem to trigger the reverse-replication (putting the content in the outbox). Could you share how you went about setting up the agent? I tried doing it via the Sling API, miscadmin, as well as setting cq:distribute
, but I can't seem to create something that picks up the content properly. I made sure the reverse-replicator is live, and it works well with the SSRF-RCE script (and your response.bin payload). Do you have any insight?
Thanks in advance!
from aem-hacker.
I have since figured out a decent setup utilizing the /bin/replicate Sling API. The un-intuitive key to getting replication to succeed on my end was to uncheck Ignore default
, On Modification
, and On Distribute
in the Reverse Replicator (outbox) on the Publish instance.
I was then able to manually activate my desired payload using the Sling API, like:
curl -v -k -s -X POST -H "Referer: http://<publishinstance>:4503" -u "admin:admin" "http://<publishinstance>:4503/bin/replicate.json" -F cmd="activate" -F path="/apps/custompayloadtype/html.jsp" > /dev/null
curl -v -k -s -X POST -H "Referer: http://<publishinstance>:4503" -u "admin:admin" "http://<publishinstance>:4503/bin/replicate.json" -F cmd="activate" -F path="/custompayload" > /dev/null
from aem-hacker.
Related Issues (14)
- address use error HOT 5
- CVE-2019-8088?
- Download configuration and HTML content
- how to proxy all request through burp HOT 1
- false positive of the Flash-xss
- [FEATURE] Use python requests sessions
- aem_enum.py removal?
- Help me please
- Decrease request pr. second?
- [Feature request] option to parse multiple site as list/file in aem_hacker.py
- Seems that you provided bad URL. Try another one, bye. HOT 1
- OSError: [Errno 98] Address already in use HOT 2
- aem_discover.py HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aem-hacker.