Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
fire-wall-server — Python-based simulated firewall to detect and block Spring4Shell (CVE-2022-22965) exploit attempts. This project filters HTTP requests by identifying malicious payload patterns using a custom firewall_server.py and tests them with test_requests.py. | Kitploit
Tools/GitHubGitHub/nosie12/fire-wall-server
Defensive ToolsVulnerability ScannersWeb Application ExploitationWeb SecurityIntrusion DetectionLearning & Education
GitHubnosie12/fire-wall-server

fire-wall-server

Python-based simulated firewall to detect and block Spring4Shell (CVE-2022-22965) exploit attempts. This project filters HTTP requests by identifying malicious payload patterns using a custom firewall_server.py and tests them with test_requests.py.

View Repository
231 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🛡️ Spring4Shell Firewall Mitigation (Python Script)

This project simulates a firewall using Python's built-in http.server module to detect and block malicious requests exploiting the Spring4Shell (CVE-2022-22965) vulnerability.

🔍 About

Spring4Shell is a critical Remote Code Execution (RCE) vulnerability affecting Spring Core Framework. Attackers use malicious payloads to deploy web shells on servers. This repo demonstrates how to block these using a lightweight custom Python HTTP firewall.

🚀 Features

  • Detects and blocks known Spring4Shell payloads
  • Pattern matching against:
    • Dangerous URL path: /tomcatwar.jsp
    • Exploit parameters like class.module.classLoader.resources.context.parent.pipeline
    • Encoded payloads: %7Bc1%7D, %7Bc2%7D
  • Responds with 403 Forbidden if malicious
Download Tool