Elasticsearch - Groovy Script RCE Detection (CVE-2015-1427)

Detects CVE-2015-1427 by POSTing a Groovy scriptfields payload to /search that executes id via Runtime.exec. !/usr/bin/env python3 -- coding: utf-8 -- """Elasticsearch Groovy scripting engine RCE CVE-2015-1427.""" import re from kittysploit import from lib.protocols.http.httpclient import...