SSRF in Apache Solr via shards parameter

This repository provides operational exploit code for two critical Apache Solr vulnerabilities: CVE-2017-3164 (SSRF) and CVE-2017-12629 (XXE leading to RCE). The structure includes HTTP request templates (both POST and GET/XXE), a JavaScript-based browser exploit (exploit-javascript.html), and a bash script (installrevshell) that installs and executes a Python reverse shell. The exploits leverage Solr's config API and the RunExecutableListener class to upload and execute arbitrary code on the server. The JavaScript file can be hosted and used for phishing-style attacks, automating the exploitation process when a target visits the page. The endpoints are parameterized for the Solr server's IP, collection name, and attacker's listener details. The payload provides a reverse shell to the attacker, granting remote command execution on the vulnerable Solr server. The repository is well-structured for operational exploitation, with clear separation of payload, exploit templates, and automation scripts.