Spring4shell_behinder

What is this?

A batch rapid exploitation tool for the Spring4Shell vulnerability (CVE-2022-22965).

Contributors

4nth0ny @Friday Lab

Issues/PRs are welcome.

:)

Environment

• python 3.x
• Behinder3.0 Beta9

Installation

python3 -m pip install -r requirements.txt

Usage

python3 spring_rce.py test.txt

test.txt

http://127.0.0.1:8080/
http://127.0.0.2:8080/
http://127.0.0.3:8080/

To specify the parameter-bound route, modify line 128 and add it to the list; the script will automatically append the endpoint to each URL for testing.

Examples

This tool automatically allocates reasonable threads based on the number of targets and prints results to the terminal.

Connect using Behinder 3.0 Beta9:

Disclaimer

This tool can only be used in enterprise security construction with sufficient legal authorization. When using this tool, you should ensure that all your actions comply with local laws and regulations. If you engage in any illegal behavior while using this tool, you will bear all consequences. All developers and contributors of this tool assume no legal or joint liability. Unless you have fully read, fully understood, and accepted all terms of this agreement, please do not install or use this tool. Your use of the tool or any other express or implied acceptance of this agreement indicates that you have read and agree to be bound by this agreement.