0730Nophone / CVE-2022-22947- Public

Notifications You must be signed in to change notification settings
Fork 9
Star 50

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）注入哥斯拉内存马

50 stars 9 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
README.md		README.md
exp.py		exp.py

Repository files navigation

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）注入哥斯拉内存马

默认key pass base64

注:代码没有清除路由部分自行清除下。。

测试环境：https://github.com/vulhub/vulhub/blob/master/spring/CVE-2022-22947/README.zh-cn.md

内存马class https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell

About

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）注入哥斯拉内存马

Report repository

Releases

No releases published

Packages

No packages published

Languages

Python 100.0%