Spring4Shell: 0-day RCE on Spring Core

• Spring4Shell-POC

  6 344 0.0 Python

  Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

I have tried all the steps in the referenced PDF and lunasec link. I also went to https://github.com/BobTheShoplifter/Spring4Shell-POC and tried poc.py - no success. I am not able to reproduce it on Spring Boot 2.6.4 with java 11.

• SpringCore0day

  3 396 0.0 Python

  SpringCore0day from https://share.vx-underground.org/ & some additional links

The one I've seen is https://github.com/craig/SpringCore0day/blob/main/exp.py

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• bugalert

  8 207 4.7 Python
  

• spring-rce-war

  2 87 3.6

• spring-rce-vulnerable-app

  1 30 7.2 Java

  Discontinued Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228) and the possible Spring RCE vulnerability.

  

Thank you, this does clarify things a bit. What confused me is the constant referencing of SerializationUtils as in https://github.com/lunasec-io/spring-rce-vulnerable-app/blob/main/src/main/java/fr/christophetd/log4shell/vulnerableapp/MainController.java

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project