CVE-2023-33246 Apache RocketMQ 任意文件写入漏洞利用

# start name serverdocker run -d --name rmqnamesrv -p 9876:9876 apache/rocketmq:4.9.6 sh mqnamesrv
# start brokerdocker run -d --name rmqbroker   --link rmqnamesrv:namesrv   -e "NAMESRV_ADDR=namesrv:9876"   -p 10909:10909   -p 10911:10911   -p 10912:10912   apache/rocketmq:4.9.6 sh mqbroker   -c /home/rocketmq/rocketmq-4.9.6/conf/broker.conf

usage: CVE-2023-37582.py [-h] [-ip IP] [-p P]
RocketMQ Exploit
optional arguments:  -h, --help  show this help message and exit  -ip IP      Nameserver address  -p P        Nameserver listen port