CVE-2022-22963 PoC — Spring Framework 代码注入漏洞

Source

Associated Vulnerability

Description

CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vulnerability exists, and if it does, will give you a reverse shell.

Readme

# CVE-2022-22963 Reverse Shell Exploit

This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable `/functionRouter` endpoint to execute a command on the target server.

## Usage

To use this exploit, simply run the script with the `-u` option to specify the URL of the vulnerable server. The script will check if the server is vulnerable and prompt the user if they want to attempt to take a reverse shell. If the user chooses to proceed, the script will open a netcat listener and attempt to execute the specified command on the target server.

File Snapshot

 [4.0K]  /data/pocs/4214f8cce6b2815b6c7b0910a1cd4d3c3078124e
├── [2.2K]  exploit.py
├── [1.0K]  LICENSE
└── [ 708]  README.md

0 directories, 3 files

Remarks