mstxq17
/ docker-compose.yml
Created
August 30, 2026 04:20
Nacos 3.x 鉴权作用域错配复现材料（docker-compose.yml / poc.py / run-lab.sh）
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Nacos 3.x 鉴权作用域错配（未授权自建管理员）复现环境 | |
| # | |
| # 镜像与配置来源（全部为官方渠道）： | |
| # [1] 官方镜像仓库 nacos/nacos-server https://hub.docker.com/r/nacos/nacos-server | |
| # [2] 官方构建仓库 nacos-group/nacos-docker https://github.com/nacos-group/nacos-docker | |
| # [3] 环境变量对照表 nacos-docker/README.md 「Common property configuration」章节 | |
| # [4] 官方快速开始 nacos.io Docker 快速开始 https://nacos.io/docs/latest/quickstart/quick-start-docker/ | |
| # | |
| # 用法： | |
| # NACOS_VERSION=v3.2.3 bash run-lab.sh # 漏洞版 |
mstxq17
/ ocserv_hack.go
Created
February 12, 2021 13:54
— forked from horsley/ocserv_hack.go
ocserv auth hacking
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // ocservFront project main.go | |
| package main | |
| import ( | |
| "bufio" | |
| "bytes" | |
| "crypto/tls" | |
| "fmt" | |
| "io" | |
| "io/ioutil" |