JumpServer未授权RCE

参考

• https://saucer-man.com/information_security/520.html
• https://blog.riskivy.com/jumpserver-%e4%bb%8e%e4%bf%a1%e6%81%af%e6%b3%84%e9%9c%b2%e5%88%b0%e8%bf%9c%e7%a8%8b%e4%bb%a3%e7%a0%81%e6%89%a7%e8%a1%8c%e6%bc%8f%e6%b4%9e%e5%88%86%e6%9e%90/
• https://www.o2oxy.cn/2921.html
• https://github.com/Skactor/jumpserver_rce
• https://www.anquanke.com/post/id/229074

环境搭建（docker）

git clone https://github.com/jumpserver/installer.git
cd installer  
export DOCKER_IMAGE_PREFIX=docker.mirrors.ustc.edu.cn
sudo ./jmsctl.sh install
./jmsctl.sh start


## 停止
./jmsctl.sh stop