# NacosExploit
项目地址：https://github.com/h0ny/NacosExploit
[](https://github.com/h0ny/NacosExploit#nacosexploit)

### 一款 Nacos 综合漏洞利用工具

## 支持漏洞

| PoC | Exploit | 漏洞名称                        | 漏洞编号             |
|-----|---------|-----------------------------|------------------|
| ✅   | ✅       | Nacos 默认关闭认证                | /                |
| ✅   | ✅       | Nacos 默认密码 (nacos/nacos)    | AVD-2021-896025  |
| ✅   | ✅       | Nacos 默认 server.identity    | /                |
| ✅   | ✅       | Nacos 默认 token.secret.key   | AVD-2023-1655789 |
| ✅   | ✅       | Nacos 默认 User-Agent         | AVD-2021-29441   |
| ✅   | ✅       | Nacos Derby SQL Injection   | AVD-2021-897468  |
| /   | ✅       | Nacos JRaft Hessian 反序列化    | AVD-2023-1700159 |
| /   | ✅       | Nacos JRaft Services 文件操作漏洞 | AVD-2024-1743586 |

### 漏洞检测

[](https://github.com/h0ny/NacosExploit#%E6%BC%8F%E6%B4%9E%E6%A3%80%E6%B5%8B)

[![](/media/202609/180805e8018248fe9ae2e505bb4653c23588.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/1.png)

### 认证绕过

[](https://github.com/h0ny/NacosExploit#%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87)

[![](/media/202609/95e5934246dd453d85ccde59d41e33695039.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/2.png)

### Derby SQL 注入

[](https://github.com/h0ny/NacosExploit#derby-sql-%E6%B3%A8%E5%85%A5)

[![](/media/202609/3fc0248c61254a74a995895152881fc99097.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/3.png)

### Jraft 反序例化

[](https://github.com/h0ny/NacosExploit#jraft-%E5%8F%8D%E5%BA%8F%E4%BE%8B%E5%8C%96)

RCE：

[![](/media/202609/64552dd104a54e22807e5ef6d49499dc1545.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/4.png)

文件读取：

[![](/media/202609/981e881f11594a9295282d62040aee407028.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/5.png)

### 加解密支持

[](https://github.com/h0ny/NacosExploit#%E5%8A%A0%E8%A7%A3%E5%AF%86%E6%94%AF%E6%8C%81)

[![](/media/202609/9e8b370616eb4db28e28e82b3bb2de282354.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/6.png)

### 批量任务

[](https://github.com/h0ny/NacosExploit#%E6%89%B9%E9%87%8F%E4%BB%BB%E5%8A%A1)

[![](/media/202609/ba14be891436439e940ce35c9e0f05674224.png)](https://github.com/h0ny/NacosExploit/blob/main/README.assets/7.png)

Nacos综合漏洞利用工具