ksqlDB unauthenticated CREATE SINK CONNECTOR cron root RCE

UNAUTH POST /ksql creates FileStreamSinkConnector writing /etc/cron.d/; produce cron line on Kafka topic 9092 for root execution. !/usr/bin/env python3 -- coding: utf-8 -- """Confluent ksqlDB unauthenticated FileStreamSinkConnector cron root RCE.""" from future import annotations import json impo...

Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE — Detect

Fingerprint / reachability check for Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE""" from kittysploit import from...