# Spring Cloud Function Vulnerability (CVE-2022-22963) RCE
This is a python implemetation of Spring4Shell, CVE-2022-22963,
affecting services running Spring Cloud Function <=3.1.6 (for 3.1.x)
and <=3.2.2 (for 3.2.x)
Combination of multiple POCs online
Author: Randall Banner
Date: 17/04/23
Description:
Script creates shell.sh in current directory, with a simple bash reverse shell
one-liner. Then starts a webserver to serve it to the victim via wget (output in
/dev/shm folder), next it makes shell.sh executable and finally runs it.
Don't forget to start Netcat before running script!
登录后查看神龙缓存的 POC 文件快照
登录查看