CVE-2022-22965 PoC — Spring Framework 代码注入漏洞

Description

Spring4Shell (POC)

介绍

![Spring4shell%20zero%20day%20vulnerability](https://www.holmsecurity.com/hs-fs/hubfs/Website/Images/Blog/Spring4Shell%20zero%20day%20vulnerability.webp?width=1200&name=Spring4Shell%20zero%20day%20vulnerability.webp)

# POC Spring4Shell (CVE-2022-22965)

Spring4Shell (CVE-2022-22965) Proof Of Concept.

The naming of this flaw is based on the similarities to the infamous Log4j LOG4Shell.

# Details about this vulnerability

https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc
https://www.springcloud.io/post/2022-03/spring-0day-vulnerability
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement

# POC USAGE


# Bash Script
```
bash spring4shell.sh
```

# Python
```
pip install -r requirements.txt
poc.py --help
```


Any Question or dubt, talk to me!
## 🦸 Autor

 <a href="https://github.com/oosungjinwoo">
 <img style="border-radius: 50%;" src="https://avatars.githubusercontent.com/u/40411471?v=4" width="100px;" alt=""/>
 <br />
 <sub><b>MICHAEL ETH1C4L H4CK3R</b></sub></a> <a href="http://osungjinwoo.github.io/" title="Github Personal Blog"> 🚀</a>
 <br />

[![Instagram Badge](https://img.shields.io/badge/-@osungjinwoo-1ca0f1?style=flat-square&labelColor=1ca0f1&logo=instagram&logoColor=white&link=https://instagram.com/michaelferral4xs)](https://instagram.com/osungjinwoo) 
[![Linkedin Badge](https://img.shields.io/badge/-Michael-blue?style=flat-square&logo=Linkedin&logoColor=white&link=https://www.linkedin.com/in/michael-al4xs/)](https://www.linkedin.com/in/michael-al4xs/) 
[![protonmail Badge](https://img.shields.io/badge/-@al4xs@protonmail.com-c14438?style=flat-square&logo=protonmail&logoColor=white&link=mailto:al4xs@protonmail.com)](mailto:al4xs@protonmail.com)

---

## 📝 Licença

Feito por Michael (osungjinwoo) 👋🏽 [Entre em contato!](https://www.linkedin.com/in/michael-al4xs/)

HACK THE PLANET!
---

文件快照

备注