commons-text-goat

Commons-Text Goat This is a webapp that is intentionally vulnerable to CVE-2022-42889. It uses an embedded Jetty server and Maven to start a servlet listening at port 8080 at URL \api. This endpoint accepts a URL parameter cmd. This is embedded between $ and and passed to the StringSubstitutor...

CVE-2022-42889-Text4Shell-POC

CVE-2022-42889 Text4Shell Testing Script This repository contains a Python script to automate the process of testing for a vulnerability known as Text4Shell, referenced under the CVE id: CVE-2022-42889. About Text4Shell CVE-2022-42889 Text4Shell is a critical vulnerability that affects a wide ran...

CVE-2022-42889-PoC

CVE-2022-42889 PoC 这是针对漏洞 CVE-2022-42889 的概念验证代码。此代码将运行 JavaScript 代码 195 + 324。如果存在漏洞，输出应为： root@kitploit: PoC Output: 519 要运行此代码，你需要： JDK 11 或以上版本 Maven 当提示输入漏洞利用字符串时，你可以提供自己的漏洞利用字符串（然后按 Enter 输入字符串），或者直接按 Enter 使用默认的漏洞利用字符串 $script:javascript:195 + 324。 Docker 或者你也可以使用 Docker 来运行此 PoC：...