Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE — Python exploit for CVE-2022-22963 (Spring4Shell) targeting Spring Cloud Function RCE. Automates reverse shell delivery via wget and bash one-liner execution. | Kitploit
Tools/GitHubGitHub/randallbanner/spring-cloud-function-vulnerability-cve-2022-22963-rce
Payload GenerationVulnerability AnalysisExploitationShellcodeWeb Application ExploitationPenetration Testing
GitHubrandallbanner/spring-cloud-function-vulnerability-cve-2022-22963-rce

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Python exploit for CVE-2022-22963 (Spring4Shell) targeting Spring Cloud Function RCE. Automates reverse shell delivery via wget and bash one-liner execution.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
453 years agoNot yet reviewed
Share

Spring Cloud Function Vulnerability (CVE-2022-22963) RCE

This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function <=3.1.6 (for 3.1.x) and <=3.2.2 (for 3.2.x)

Combination of multiple POCs online

Author: Randall Banner

Date: 17/04/23

Description: Script creates shell.sh in current directory, with a simple bash reverse shell one-liner. Then starts a webserver to serve it to the victim via wget (output in /dev/shm folder), next it makes shell.sh executable and finally runs it.

Don't forget to start Netcat before running script!

Download Tool