lcarea/cve-2022-22965Batch vulnerability scanner for CVE-2022-22965 (Spring4Shell) enabling automated detection and exploitation via JSP webshell injection across multiple targets.
CVE-2022-22965 spring-core batch detection script
Disclaimer: This script is for learning purposes only. Prohibited for illegal use. If there is any malicious destruction or illegal use, it has nothing to do with me!!!
Usage:
python3 CVE-2022-22965-POC.py url.txt
After successful writing, access the shell
http://192.168.0.101:8090/test.jsp
Here I only used the shell as 123, and did not use a trojan. It is only for security detection.
