https://x7peeps.com/tags/Apache-Spark/index.htmlHugozh-CNSat, 20 Jun 2026 20:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/Apache_Spark_REST_API_Thrift_Server_History_Server_%E7%AE%A1%E7%90%86%E9%9D%A2%E6%89%93%E7%82%B9%E4%B8%8E%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlSat, 20 Jun 2026 20:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/Apache_Spark_REST_API_Thrift_Server_History_Server_%E7%AE%A1%E7%90%86%E9%9D%A2%E6%89%93%E7%82%B9%E4%B8%8E%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlApache Spark 管理面渗透测试：Standalone REST API 未授权提交 RCE、Master/Worker Web UI 利用、History Server 凭据泄露、Thrift Server SQL 注入与 SSRF 链路