CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ 개요 CVE-2026-16723 은 Fastjson 1.x1.2.68 – 1.2.83의 원격 코드 실행RCE 취약점입니다. Fastjson이 공격자가 제어하는 JSON을 파싱할 때, 조작된 @type 값은 checkAutoType 내부의 클래스 리소스 조회로 변환됩니다. Spring Boot 실행 가능 fat-JAR에서는 클래스 로더가 해당 이름을 jar:http:// URL로 해석하여 원격 JA...

CVE-2017-8046-DEMO

spring data rest CVE-2017-8046 데모 테스트 지금 즉시 spring data rest를 업그레이드하세요. 단계 이 애플리케이션 시작 test 인스턴스 생성 POST /entityPersons/ HTTP/1.1 Host: localhost:8080 Content-Type: application/json Cache-Control: no-cache "firstName":"f2" SpEL 주입을 이용하여 C:\Windows\system32\calc.exe 실행 PATCH /entityPersons/1...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCE Vulnerability Reproduction Requires Docker environment Method 1 to start the vulnerable environment git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh Method 2 to start the vulnerable environment...

CVE-2022-22970

Spring CVE-2022-22970 Proof of Concept This repo contains a Development Container environment and Spring application of the correct version specifically to explore this CVE. Setup Instructions Clone the repo to your machine and use Docker and your favorite IDE. OR Use GitPod online with...

Spring-CVE-2022-22947-

This repository does not have a README...

CVE-2022-22947

CVE-2022-22947 poc for CVE-2022-22947 python CVE-202222947POC.py http://targetip:port/ Refer to POCs and articles from several experts 1.https://github.com/chaosec2021/CVE-2022-22947-POC 2.https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/...

spring-core-rce

CVE-2022-22965: Spring-Core-Rce EXP Features: 1. Vulnerability detection does not write a webshell, simple string output 2. Custom webshell file name and path 3. Does not append to the same file; each detection writes to a different webshell file name 4. Supports writing Behinder webshell 5. Prox...

CVE-2022-22963

CVE-2022-22963-Reverse-Shell-Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Demonstration Project This is a demonstration project for learning and researching the Log4j2 remote code execution vulnerability Log4Shell. ⚠️ Safety Warning This project is intended for security research and educational purposes only. Do not...

CVE-2022-22965

Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution Exploit Usage: python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" Result: Malicious SpEL expression route added successfully! Route refresh successful! Attack result obtained successfully:...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC Minimal example to reproduce CVE-2022-22963 remote code execution in org.springframework.cloud:spring-cloud-function-core. Exploit Run the server mvn spring-boot:run Make a request curl -X POST -H 'spring.cloud.function.routing-expression:...

Spring-CVE-2010-1622

Spring-CVE-2010-1622...

SpringBreakPoC

SpringBreakPoC 최근 공개된 SpringBreak 취약점CVE-2017-8046에 대해 여러 엔드포인트를 테스트할 도구가 필요했지만, 마땅한 도구를 찾지 못해 이걸 급조했습니다. 사용법 \ \ / /| \ \ \ | \ /\ | /| || | | \ || /| | || /| || \ / / | | || | | | | \ | || | | / / | || | || / / | | | | | \ \ || | | | | | || || | \ | | | | \ || | \ | \ \ | \ | | || \ \ /\ || |...

sprig-mvc-demo-patch

sprig-mvc-demo-patch This demo application partially covers the vulnerability CVE-2024-38828 The vulnerability CVE-2024-38828 in Spring Framework allows a Denial of Service DoS attack by sending a large or specially crafted request to a Spring MVC controller that accepts a parameter of type byte...

springshell-rce-poc

CVE-2022-22965 - vulnerable app and PoC Trial & error $ docker rm -f rce; docker build -t rce:latest . && docker run -d -p 8080:8080 --name rce rce:latest && sleep 5 && python poc.py Output example rce sha256:f626a2190dc0790c610afd4f12a4b2482b6a726d671fdac1432275de89c07cd6...

Spring-Kafka-POC-CVE-2023-34040

Spring Kafka Deserialization POC Requirements Java 11 Maven Docker or Kafka Usage First start up the Dockerized Kafka instance. This will start up Kafka and make it available on port 29092. docker-compose up Start up the Consumer application. cd spring-kafka-consumer mvn clean install mvn...

log4j2-vulnerable-spring-app

Log4j 2 CVE-2021-44228 테스트 샘플 애플리케이션 spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 기반 사용 가능한 엔드포인트 엔드포인트| 요청 메서드| 매개변수 ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GET / POST| Header User-Agent 테스트 가능 GET $ curl...

CVE-2024-37084

CVE-2024-37084 Spring Cloud Remote Code Execution...

CS4239-Spring4Shell-POC

CS4239-Spring4Shell-POC CS4239 G410 보고서용 CVE-2022-22965Spring4Shell 개념 증명PoC입니다. 패치되지 않은 동작과 패치된 동작을 시연하기 위해 이 PoC를 각색했습니다. 데모 실행 이 저장소에는 동일한 소스 코드를 가진 2개의 예제 프로그램도커화됨이 있습니다. 하나는 취약한 버전의 Spring Boot를 사용하고 다른 하나는 패치된 버전을 사용합니다. Tomcat도 이 취약점에 대한 패치를 출시했지만, Spring 패치의 효과를 분리하기 위해 이 데모에서는 동일한 취약한 버전...