spark-rest-auth-bypass

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-rest-auth-bypass spark-rest-auth-bypass Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation Standalone Master REST is default-on port 6066 and never reads...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

CVE-2018-11770

CVE-2018-11770 Apache Spark Unauthenticated Reverse Shell RCE Standalone Python 3 RCE exploit for Apache Spark rewritten from this Metasploit module Exploit POC explained here. The exploit code itself is explained here. Tested with Python 3.7 on this target. Usage:...

spark-exploit

Arbitary Code Execution in Unsecured Apache Spark Cluster How to Exploit Follow the below steps: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit Remote Code Execution Open exploit.scala, Replace the following code with whatever you want to get executed! val exploit =...

CVE-2022-33891

「💥」CVE-2022-33891 Description The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...

HELK

HELK The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was...

CVE-2022-33891

CVE-2022-33891 - Apache Spark Command Injection Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author AkbarTrilaksana Description The Apache Spark UI offers the possibility to enable ACLs via the...

CVE-2022-33891

CVE-2022-33891 PoC PoC for CVE-2022-33891, with ability to set custom payloads. Not vulnerable by default -- spark.acls.enable need to be TRUE. Intended Use Usage of this script is limited to personnel who are authorised to run the payload on the target hosts for vulnerability patching purposes...

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

lab_security_apache_spark_emulation_detection

This repository does not have a README...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

spark-connect-archive-fragment

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-connect-archive-fragment spark-connect-archive-fragment Class: File write Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation Spark Connect AddArtifacts names of the form archives/ split on th...

spark-rpc-stream-unauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-rpc-stream-unauth spark-rpc-stream-unauth Class: Privilege leftover / File read Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation CVE-2020-9480 closed unauthenticated RequestSubmitDriver /...

spark-proxyuser-classpath

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-proxyuser-classpath spark-proxyuser-classpath Class: Privilege leftover leftover of CVE-2023-22946 / SPARK-41958 Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation CVE-2023-22946 / SPARK-4195...

spark-connect-copy-local

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-connect-copy-local spark-connect-copy-local Class: File write leftover of SPARK-58531; static on 4.3.0 only Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation...

spark-history-store-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-history-store-path spark-history-store-path Class: File write config-gated Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation HistoryServerDiskManager.appStorePath does new FileappStoreDir,...

spark-jdbc-serde-url

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-jdbc-serde-url spark-jdbc-serde-url Class: JDBC URL injection Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation SPARK-31710 stopped scan-time extra options from overriding a stored JDBC url...

spark-python-ds-static

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-python-ds-static spark-python-ds-static Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation DataSourceManager.dataSourceBuilders is a JVM-global first-wins map...

spark-history-zip-symlink

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-history-zip-symlink spark-history-zip-symlink Class: File read Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation CVE-2025-54920 locked History Server Jackson so sparkEventFromJson only...