malayke / cve-2023-33246_rocketmq_rce_exploit Goto Github PK

There seems to be something wrong here

 hex_payload_length = hex(len(payload) - 4)[2:]
    payload = payload.hex().replace('000000cd000000','000000' + hex_payload_length + '000000')
    payload = bytes.fromhex(payload)

when: cmd len: 184

hex(len(payload) - 4) = 14e
[2:] = e

I was just curious to the choice of the ports 11911, 12911, and 13911 in the Nmap script?

It looks like those port numbers are not used by default in the RocketMQ code base and I don't really find anything online suggesting to use them as an alternative. So I was curious if you found those port numbers used a lot in deployment.

thank for code; but I after run your code get empty response.
do you have advice for help?