POC详情： a2705df26206255e14ce64eb3ac5faa0557a450a

来源
https://github.com/osungjinwoo/CVE-2022-22965
关联漏洞
标题： Spring Framework 代码注入漏洞 (CVE-2022-22965)
描述：Spring Framework是美国Spring团队的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。 Spring Framework 存在代码注入漏洞，该漏洞源于 JDK 9+ 上的数据绑定的 RCE。以下产品和版本受到影响：5.3.0 至 5.3.17、5.2.0 至 5.2.19、较旧的和不受支持的版本也会受到影响。
描述
Spring4Shell (POC)
介绍
![Spring4shell%20zero%20day%20vulnerability](https://www.holmsecurity.com/hs-fs/hubfs/Website/Images/Blog/Spring4Shell%20zero%20day%20vulnerability.webp?width=1200&name=Spring4Shell%20zero%20day%20vulnerability.webp)

# POC Spring4Shell (CVE-2022-22965)

Spring4Shell (CVE-2022-22965) Proof Of Concept.

The naming of this flaw is based on the similarities to the infamous Log4j LOG4Shell.

# Details about this vulnerability

https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc
https://www.springcloud.io/post/2022-03/spring-0day-vulnerability
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement

# POC USAGE


# Bash Script
```
bash spring4shell.sh
```

# Python
```
pip install -r requirements.txt
poc.py --help
```


Any Question or dubt, talk to me!
## 🦸 Autor

 <a href="https://github.com/oosungjinwoo">
 <img style="border-radius: 50%;" src="https://avatars.githubusercontent.com/u/40411471?v=4" width="100px;" alt=""/>
 <br />
 <sub><b>MICHAEL ETH1C4L H4CK3R</b></sub></a> <a href="http://osungjinwoo.github.io/" title="Github Personal Blog"> 🚀</a>
 <br />

[![Instagram Badge](https://img.shields.io/badge/-@osungjinwoo-1ca0f1?style=flat-square&labelColor=1ca0f1&logo=instagram&logoColor=white&link=https://instagram.com/michaelferral4xs)](https://instagram.com/osungjinwoo) 
[![Linkedin Badge](https://img.shields.io/badge/-Michael-blue?style=flat-square&logo=Linkedin&logoColor=white&link=https://www.linkedin.com/in/michael-al4xs/)](https://www.linkedin.com/in/michael-al4xs/) 
[![protonmail Badge](https://img.shields.io/badge/-@al4xs@protonmail.com-c14438?style=flat-square&logo=protonmail&logoColor=white&link=mailto:al4xs@protonmail.com)](mailto:al4xs@protonmail.com)

---

## 📝 Licença

Feito por Michael (osungjinwoo) 👋🏽 [Entre em contato!](https://www.linkedin.com/in/michael-al4xs/)

HACK THE PLANET!
---
文件快照

 [4.0K]  /data/pocs/a2705df26206255e14ce64eb3ac5faa0557a450a
├── [1.8K]  README.md
├── [2.4K]  spring4shell.py
└── [1.5K]  spring4shell.sh

0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。