XXL-JOB 2.2.0 with no accessToken configured: the executor's /run endpoint on port 9999 accepts a job from anyone, and a GLUE_SHELL job runs its script on the executor host.
Not startedDockercommit 2d02d1ex86_64 · aarch64Secret
Abuse the unauthenticated XXL-JOB executor to run commands and get a shell.
The brief for this lab lives in its repository.