CVE-2022-42889-PoC

CVE-2022-42889 a.k.a. Text4Shell RCE Proof of Concept Text4Shell is the popular name of a critical software vulnerability discovered in the Apache Commons Text library see CVE-2022-42889. This repo is meant to demonstrate a Remote Code Execution RCE that leverages this CVE. The vulnerable code is...

Apache Commons Text CVE-2022-42889 Detection

Detects CVE-2022-42889 Text4Shell via a blind sleep injection using the script:javascript StringSubstitutor lookup on a target parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Commons Text CVE-2022-42889 Text4Shell detection.""" import random import time from kittysploit import from...

Apache Commons Text RCE (CVE-2022-42889 / Text4Shell)

Exploits CVE-2022-42889 in Apache Commons Text 1.5–1.9 when the StringSubstitutor default interpolator evaluates $script:javascript:... lookups. Requires a vulnerable request parameter on the target. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Commons Text StringSubstitutor RCE...