SpringBootVulExploit

Spring Boot Vulnerability Exploit Check List Collection of Spring Boot related vulnerability learning materials, exploitation methods and techniques, black-box security assessment check list Statement ⚠️ All content in this project is only for security research and authorized testing. Those who...

cve-2022-22947

cve-2022-22947 Spring Cloud Gateway is an API gateway in Spring. Versions 3.1.0 and 3.0.6 inclusive and earlier contain a SpEL expression injection vulnerability. When an attacker can access the Actuator API, they can exploit this vulnerability to execute arbitrary commands. Usage: ➜...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Core​ Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: $...

-cve-2022-22947-

-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference: https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947 1...

Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980 Environment...

Security Bulletin: Spring Expression Language (SpEL) in IBM Sterling Control Center makes it vulnerable to Improper Control of Dynamically-Managed Code Resources (CVE-2026-59283)

Summary Spring MVC application evaluate Spring Expression Language SpEL which used by IBM Sterling Control Center as part of dependency in spring-expression-6.2.12.jar Vulnerability Details CVEID:CVE-2026-59283 DESCRIPTION: Applications that evaluate Spring Expression Language SpEL expressions...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

log4shell-rmi-poc

log4shell-rmi-poc A Proof of Concept of the Log4j vulnerability CVE-2021-44228 over Java-RMI It uses Log4j 2.5.7 from spring-boot-starter-log4j2 Requirements: Tested with Java 8 JDK 1.8.025 and Java 11 JDK 11.0.1 How to run the POC 1. Clone the repo: git clone...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql Unauthorized SQL Injection Batch Scan PoC. Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest version jeecg-boot 3.5.0 has been exposed with multiple SQL injection vulnerabilities. Usage...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...

CVE-2022-25845-In-Spring

CVE-2022-25845-In-Spring !IMPORTANT For learning and exchange only, do not use for illegal purposes exploit by python If helpful, give a star. Reference: https://github.com/luelueking/CVE-2022-25845-In-Spring Usage Modify the parameter passing logic as needed. Here, the default is POST request bo...

CVE-2022-22978

CVE-2022-22978 Spring Security Pass Spring Security 成功 http://localhost:9090/login%0a Pass Spring Security with SayMyName 失敗 http://localhost:9090/name%0d Bypass Spring Security with Custom RBAC 失敗 http://localhost:9090/admin/admin%0d Bypass Spring Security with Annotation RBAC 失敗...

Spring-CVE

Spring CVE This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell". CVE-2022-22963 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing...

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" build wget...

spring-core-rce

Spring Core RCE/CVE-2022-22965 Affected scope: Spring framework and derivative frameworks with JDK=9 Reference article This script is for learning purposes only. Any legal liability arising from its use for other purposes is solely the responsibility of the user, not the author. 1. Installation...

CVE-2021-44228

Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...

spring_cloud_gateway_memshell

CVE-2022-22947 memshell This script is incomplete, for learning purposes only, do not use illegally. Based on c0ny1 senior's blog, this is a learning script that can write netty and spring memory shells. Test environment is vulhub eg:xx.py http://127.0.0.1:8080 netty whoami...

cve-2022-22980

spring-data-mongodb-cve-2022-22980-exp A mediocre vulnerability, just making a note. 1. Start Redis, port 27017 2. Start the project, SpringBoot starts on port 6666 3. GET /v1/user/get?username=Tjava.lang.Runtime.getRuntime.exec'open+-a+calculator.app' HTTP/1.1 Host: localhost:6666 Accept-Encodin...