CVE-2022-22947_Rce_Exp

CVE-2022-22947RceExp Spring Cloud Gateway Remote Code Execution Vulnerability Exp SpringCloudGatewayRCEExp-CVE-2022-22947...

CVE-2022-22947-goby

CVE-2022-22947-goby Regularly updated some casually written goby POCs, including high-risk EXP. goby CVE202222947.json...

CVE-2022-22947_exp

CVE-2022-22947-exp CVE-2022-22947 Exploit script Use root@kitploit: python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...

SpEL

SpEL Batch detection tool for Spring Cloud Gateway Actuator API SpEL expression injection command execution CVE-2022-22947 Usage Write the URLs to be tested line by line in a file. Use parameter -TF to specify the file, and -t for concurrency count. Execution Result Yutu Security is committed to...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...

demo-cve-2022-22947

demo-cve-2022-22947...

spring-cve-2022-22947

spring-cve-2022-22947 Spring cloud gateway code injection : CVE-2022-22947...

-cve-2022-22947-

-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference:...

CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

CVE-2022-22947

CVE-2022-22947 Usage: root@kitploit: python3 CVE-2022-22947.py url...

Spring-Cloud-Gateway-CVE-2022-22947

Spring-Cloud-GatewayCVE-2022-22947 Spring Cloud Gateway Remote Code Execution Vulnerability root@kitploit: python3 springrce.py url cmd There is a cache, execute it several times...

CVE-2022-22947-Rce_POC

CVE-2022-22947-RcePOC Batch URL detection of Spring Cloud Gateway CVE-2022-22947 Usage py Spring-Cloud-Gateway.py UrlsPath After execution, a gateway.log file is generated, where '+', '-', '' indicate 'vulnerable', 'not vulnerable', and 'request error' respectively...

CVE-2022-22947-POC

CVE-2022-22947-POC CVE-2022-22947 batch detection script. The echo command is not regex-filtered. Please use it for now; I will update later. Place url.txt in the script directory. Directly run: python 脚本.py Demo: After the scan is complete, a success.txt file will be generated. This script will...

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

spring-cloud-gateway-rce

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution CVE-2022-22947 1. Installation root@kitploit: pip3 install -r requirements.txt 2. Usage root@kitploit: $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ \ / / /\ || | | |...

cve-2022-22947-docker

This repository does not have a README...

CVE-2022-22947

CVE-2022-22947 root@kitploit: script for exploit Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 root@kitploit: https://github.com/march0s1as/CVE-2022-22947 cd CVE-2022-22947 go build spring.go ./spring -h...

CVE-2022-22947

Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage root@kitploit: main -u http://127.0.0.1:8080 Using proxy root@kitploit: main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...

Burp_VulPscan

BurpVulPscan burp passive scanning plugin, currently only CVE-2022-22947 Plan to integrate various collected high-threat PoCs together and add them in. A practice project for learning Java...

CVE-2022-22947-POC-Reproduce

CVE-2022-22947-POC CVE-2022-22947 reproduce...