hadoop-yarn-rpc-rce: Hadoop Yarn RPC RCE

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Al1ex/Hadoop-Yarn-ResourceManager-RCE
• https://www.alibabacloud.com/blog/zero-day-attack-analysis-and-dissemination-method-disclosure-for-hadoop-yarn-rpc_598248
• https://www.trendmicro.com/en_us/research/21/g/threat-actors-exploit-misconfigured-apache-hadoop-yarn.html
• https://www.rapid7.com/db/modules/exploit/linux/http/hadoop_unauth_exec/
• https://github.com/0xmaximus/final_freaking_nuclei_templates/blob/main/Hadoop-Yarn-RPC-RCE.yaml
• https://cloud.tencent.com/developer/article/1909367
• https://www.exploit-db.com/exploits/45025
• https://www.modb.pro/db/189857
• https://developer.aliyun.com/article/1161767
• https://zgao.top/hadoop-yarn-rpc%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/
• https://zhuanlan.zhihu.com/p/437468672
• https://stack.chaitin.com/poc/detail/47
• https://github.com/cckuailong/YarnRpcRCE
• https://ta0ing.github.io/article/e8c0069d.html
• https://www.huaweicloud.com/intl/en-us/notice/20211116150241951.html

Related Vulnerabilities

• PoChadoop-disclosure: Apache Hadoop Disclosure
• PoChadoop-yarn-unauth: Hadoop Yarn Unauth
• PoChadoop-unauth-rce: Apache Hadoop YARN ResourceManager - Remote Code Execution
• PoCyarn-resourcemanager-rce: Apache Hadoop YARN ResourceManager - Remote Code Execution
• Apache Hadoop 敏感信息存储不当漏洞
• Apache Hadoop 弱口令漏洞
• Apache Hadoop cluster 未授权访问漏洞
• Hadoop YARN REST API 未授权访问导致远程代码执行漏洞
• Hadoop Yarn RPC 未授权RCE PoC
• 浪潮ClusterEngine hadoop 前台RCE漏洞
• Hadoop HUE弱口令B
• Hadoop YARN ResourceManager 未授权访问