SpringExploitGUI_v1.0

0x01 Preface

Today, I reproduced several previous Spring vulnerabilities and weaponized them. The tool currently supports detection and exploitation of Spring Cloud Gateway RCE (CVE-2022-22947), Spring Cloud Function SpEL RCE (CVE-2022-22963), and Spring Framework RCE (CVE-2022-22965). This is only the first version; more vulnerability PoCs and persistence exploitation methods will be added in the future.

0x02 Tool Usage Instructions

Single Detection && Batch Detection

The tool supports single-vulnerability single-target detection as well as multi-target detection.

Exploitation

Spring Cloud Gateway RCE (CVE-2022-22947) currently supports command execution, one-click reverse shell, and Godzilla memory shell injection.

Spring Cloud Function SpEL RCE (CVE-2022-22963) currently supports one-click reverse shell.

Spring Framework RCE (CVE-2022-22965) currently supports command execution implemented by writing a webshell. In the future, exploitation methods such as writing SSH public keys and scheduled tasks will be implemented.

0x03 Disclaimer

This open-source tool is released by the author under an open-source license and is intended for personal learning and research only. The author assumes no legal responsibility for any consequences arising from your use of this tool.