Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-39197-patch — CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch. | Kitploit
Tools/GitHubGitHub/burpheart/cve-2022-39197-patch
Vulnerability AnalysisExploitationWeb SecurityPenetration TestingCommand and ControlRed Teaming
GitHubburpheart/cve-2022-39197-patch

CVE-2022-39197-patch

CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch.

View Repository
317413 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-39197 patch

CVE-2022-39197 Cobalt Strike XSS 漏洞的一个临时补丁

通过 hook javax.swing.plaf.basic.BasicHTML的isHTMLString方法来禁用swing的html支持

PS: 部分依赖html的页面无法正常渲染(例如 关于页面)

使用方法

将 patch.jar 放入cobaltstrike启动目录下

在cobaltstrike启动参数中加入javaagent 启用补丁

root@kitploit:~
-javaagent:patch.jar

启动cobaltstrike 输出Successfully Patched. 即为禁用成功

root@kitploit:~
====== CVE-2022-39197 patch @burpheart ======
Successfully Patched.

CVE-2022-39197 Cobalt Strike XSS vulnerability patch

Disable html support for swing by hooking the isHTMLString method of javax.swing.plaf.basic.

PS: Some html-dependent pages do not render properly ( Such as About page etc.) Add javaagent to the cobaltstrike startup parameters to enable patching

root@kitploit:~
-javaagent:patch.jar

Start cobaltstrike and output Successfully Patched.

root@kitploit:~
====== CVE-2022-39197 patch @burpheart ======
Successfully Patched.
Download Tool