OSGI bundle allows to get RCE when you have access to Felix Console. There is pre-build bundle rce.bundle.core-1.0-SNAPSHOT.jar
, works for AEM 6.2 or newer.
Generate new skeleton as described below. Backport BackdoorServlet
to newly genearted skeleton and build it with maven.
For AEM 5.6 use following maven command.
mvn org.apache.maven.plugins:maven-archetype-plugin:2.4:generate \
-DarchetypeGroupId=com.day.jcr.vault \
-DarchetypeArtifactId=multimodule-content-package-archetype \
-DarchetypeVersion=1.0.2 \
-DarchetypeCatalog=https://repo.adobe.com/nexus/content/groups/public/
For AEM 6.0 or newer use following maven command.
mvn org.apache.maven.plugins:maven-archetype-plugin:2.4:generate \
-DarchetypeGroupId=com.adobe.granite.archetypes \
-DarchetypeArtifactId=aem-project-archetype \
-DarchetypeVersion=SELECT_FROM_TABLE \
-DarchetypeCatalog=https://repo.adobe.com/nexus/content/groups/public/
Select archetype version from the table.
Archetype version | AEM version |
---|---|
7 | 6.0 or newer |
8 | 6.0 or newer |
9 | 6.0 or newer |
10 | 6.0 or newer |
11 | 6.2 or newer |
12 | 6.3 or newer |
13 | 6.4, 6.3 + SP2 |
14 | 6.4, 6.3 + SP2 |