├── CVE-2021-26084 └── CVE-2021-26084.md └── CVE-2022-26133 ├── README.md ├── images ├── BitBucketDeserializationCallChain.png ├── bitbucket-hazelcast-rce-poc.png ├── runMutualChallengeResponse.png ├── verifyGroupName.png ├── wireshark-bitbucket-payload.png ├── wireshark-bitbucket-response-cluster-name.png └── wireshark-query-bitbucket-cluster-name.png ├── scripts ├── .env ├── Dockerfile ├── docker-compose.yml ├── haproxy │ └── haproxy.cfg └── setup-bitbucket-docker.sh └── wireshark └── bitbucket-hazelcast-rce-wireshark.pcapng /CVE-2021-26084/CVE-2021-26084.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2021-26084/CVE-2021-26084.md -------------------------------------------------------------------------------- /CVE-2022-26133/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/README.md -------------------------------------------------------------------------------- /CVE-2022-26133/images/BitBucketDeserializationCallChain.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/BitBucketDeserializationCallChain.png -------------------------------------------------------------------------------- /CVE-2022-26133/images/bitbucket-hazelcast-rce-poc.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/bitbucket-hazelcast-rce-poc.png -------------------------------------------------------------------------------- /CVE-2022-26133/images/runMutualChallengeResponse.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/runMutualChallengeResponse.png -------------------------------------------------------------------------------- /CVE-2022-26133/images/verifyGroupName.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/verifyGroupName.png -------------------------------------------------------------------------------- /CVE-2022-26133/images/wireshark-bitbucket-payload.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/wireshark-bitbucket-payload.png -------------------------------------------------------------------------------- /CVE-2022-26133/images/wireshark-bitbucket-response-cluster-name.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/wireshark-bitbucket-response-cluster-name.png -------------------------------------------------------------------------------- /CVE-2022-26133/images/wireshark-query-bitbucket-cluster-name.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/images/wireshark-query-bitbucket-cluster-name.png -------------------------------------------------------------------------------- /CVE-2022-26133/scripts/.env: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/scripts/.env -------------------------------------------------------------------------------- /CVE-2022-26133/scripts/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/scripts/Dockerfile -------------------------------------------------------------------------------- /CVE-2022-26133/scripts/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/scripts/docker-compose.yml -------------------------------------------------------------------------------- /CVE-2022-26133/scripts/haproxy/haproxy.cfg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/scripts/haproxy/haproxy.cfg -------------------------------------------------------------------------------- /CVE-2022-26133/scripts/setup-bitbucket-docker.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/scripts/setup-bitbucket-docker.sh -------------------------------------------------------------------------------- /CVE-2022-26133/wireshark/bitbucket-hazelcast-rce-wireshark.pcapng: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/snowyyowl/writeups/HEAD/CVE-2022-26133/wireshark/bitbucket-hazelcast-rce-wireshark.pcapng --------------------------------------------------------------------------------