mustafa1986/cve-2022-22963Python exploit for CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function, enabling arbitrary command execution via the /functionRouter endpoint.
This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a command on the target server.
Install the required Python libraries by running the following command:
pip3 install requests
chmod +x spring_exploit.py
Run the script by providing the target URL using the -u or --url option:
./spring_exploit.py -u http://mysite.com:8080
or
python spring_exploit.py -u http://mysite.com:8080