Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/sanderschepers1993/cybersec2026
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationLabs & Practice
GitHubsanderschepers1993/cybersec2026

CyberSec2026

Educational lab environment for exploiting CVE-2022-22947 in Spring Cloud Gateway, with automated victim VM setup and attacker configuration scripts.

View Repository
23 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Victim installation

Start your VM in VirtualBox

  1. Log in with:
  • username: osboxes
  • password: osboxes.org

  1. Open a terminal

  2. Test if you have a working internet connection.

root@kitploit:~
ping 8.8.8.8
  • If your ping is not successful, check if your NAT interface is enabled.
  1. Update your OS
root@kitploit:~
sudo apt-get update
  1. Install Git
root@kitploit:~
sudo apt install -y git
  1. Clone your configuration files for Kali
root@kitploit:~
git clone https://github.com/SanderSchepers1993/CyberSec2026.git
  1. Go to the newly cloned Victim directory
root@kitploit:~
cd CyberSec2026/Victim
  1. Run the script 01_setup_server.sh with sudo privileges
root@kitploit:~
sudo bash 01_setup_server.sh
  • If you encounter problems with openjdk-11-jdk, see TROUBLESHOOTING at the bottom of this README.
  1. Continue with the post-installation of the Attacker VM

[TROUBLESHOOTING]

Unable to locate package openjdk-11-jdk

Unable to find openjdk11

  1. Run the script 02_setup_server_java17.sh with sudo privileges
root@kitploit:~
sudo bash 02_setup_server_java17.sh
  1. Open your spring-gateway service with a text editor:
root@kitploit:~
sudo nano /etc/systemd/system/spring-gateway.service
  1. Replace ExecStart with the following
root@kitploit:~
ExecStart=/usr/bin/java --add-opens java.base/java.lang=ALL-UNNAMED -jar /opt/spring-gateway/target/vulnerable-gateway-1.0.0.jar
  • We are now setting up the environment with Java 17 instead of Java 11.
  • Java 17 blocks the execution of external Java libraries by default.
  • With the above command, you allow Java libraries outside the Java module to use reflection to look into java.lang.
  1. Restart the service
root@kitploit:~
sudo systemctl daemon-reload
sudo systemctl restart spring-gateway.service
Download Tool