Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
spring-framework-rce — CVE-2022-22965 | Kitploit
Tools/GitHubGitHub/wshon/spring-framework-rce
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubwshon/spring-framework-rce

spring-framework-rce

CVE-2022-22965

View Repository
44 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

spring-framework-rce

CVE-2022-22965

Requirements

  1. tomcat8 <=8.5.77, tomcat9 <=9.0.60
  2. jdk > 8

Usage

  1. Download spring_framework_rce-0.0.1-SNAPSHOT.zip, unzip, and rename to ROOT.war.
  2. Replace the ROOT folder or ROOT.war in the webapps folder of tomcat.
  3. Switch to the bin directory of tomcat and run .\catalina.bat run.

Testing Method

Omitted

Results

Download Tool
jdktomcatResult
jdk8u322-b06apache-tomcat-8.5.77Secure
jdk8u322-b06apache-tomcat-8.5.78Secure
jdk8u322-b06apache-tomcat-9.0.60Secure
jdk-9.0.4+11apache-tomcat-8.5.77Vulnerable
jdk-9.0.4+11apache-tomcat-8.5.78Secure (log error)
jdk-9.0.4+11apache-tomcat-9.0.60Vulnerable
jdk-11.0.14.1+1apache-tomcat-8.5.77Vulnerable
jdk-11.0.14.1+1apache-tomcat-8.5.78Secure (log error)
jdk-11.0.14.1+1apache-tomcat-9.0.60Vulnerable