Sploitus

Exploit for CVE-2022-30190

kitploit Β· 2026-08-26

Exploit Code

MARKDOWN111 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-DERZIAD-CVE-2022-30190
# CVE-2022-30190 (Follina) κ°œλ… 증λͺ…

![CVE](https://img.shields.io/badge/CVE-2022--30190-critical?style=for-the-badge%5C&logo=security) ![License: MIT](https://img.shields.io/badge/License-MIT-green?style=for-the-badge) ![Docker](https://img.shields.io/badge/Docker-ready-blue?style=for-the-badge%5C&logo=docker)

* * *

## κ°œμš”

![Follina](https://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be03c46f67cb31b9fa8c.svg)

이 ν”„λ‘œμ νŠΈλŠ” **"Follina"**라고도 μ•Œλ €μ§„ CVE-2022-30190에 λŒ€ν•œ **κ°œλ… 증λͺ… μ΅μŠ€ν”Œλ‘œμž‡** 을 μ‹œμ—°ν•©λ‹ˆλ‹€. μ΄λŠ” MSDT ν”„λ‘œν† μ½œμ„ 톡해 Microsoft Office에 영ν–₯을 λ―ΈμΉ˜λŠ” 치λͺ…적인 원격 μ½”λ“œ μ‹€ν–‰ μ·¨μ•½μ μž…λ‹ˆλ‹€. 이 μ• ν”Œλ¦¬μΌ€μ΄μ…˜μ€ **ꡐ윑 및 연ꡬ λͺ©μ μœΌλ‘œλ§Œ** μ΅μŠ€ν”Œλ‘œμž‡ μ›Œν¬ν”Œλ‘œλ₯Ό μ„€λͺ…ν•˜κΈ° μœ„ν•΄ μ•…μ„± Office λ¬Έμ„œλ₯Ό μƒμ„±ν•©λ‹ˆλ‹€.

> ⚠ **κ²½κ³ :** 이 μ €μž₯μ†ŒλŠ” ꡐ윑 및 승인된 λ³΄μ•ˆ μ—°κ΅¬μš©μœΌλ‘œλ§Œ μ‚¬μš©λ©λ‹ˆλ‹€. ν”„λ‘œλ•μ…˜ ν™˜κ²½μ΄λ‚˜ μ†Œμœ ν•˜μ§€ μ•Šμ•˜κ±°λ‚˜ λͺ…μ‹œμ  ν…ŒμŠ€νŠΈ ν—ˆκ°€λ₯Ό 받지 μ•Šμ€ μ‹œμŠ€ν…œμ— λŒ€ν•΄ **μ‚¬μš©ν•˜μ§€ λ§ˆμ‹­μ‹œμ˜€**.

* * *

## κΈ°λŠ₯

  * πŸ“ Follina 취약점을 μ•…μš©ν•˜λŠ” Office λ¬Έμ„œ 생성
  * 🌐 νŽ˜μ΄λ‘œλ“œ 생성을 μœ„ν•œ κ°„λ‹¨ν•œ μ›Ή μΈν„°νŽ˜μ΄μŠ€
  * 🐳 μ‰¬μš΄ μ„€μ •κ³Ό 격리λ₯Ό μœ„ν•œ 도컀화



* * *

## 기술 μŠ€νƒ

  * Java 21 β˜•
  * Spring Boot πŸš€
  * Apache Commons πŸ“¦
  * Docker 🐳
  * JSP πŸ–₯️



* * *

## 사전 μš”κ΅¬ 사항

  * Docker 🐳
  * Docker Compose πŸ“¦



* * *

## λΉ λ₯Έ μ‹œμž‘

  1. **μ €μž₯μ†Œ 클둠:**

root@kitploit:~
         
         git clone https://github.com/yourusername/CVE-2022-30190.git
         cd CVE-2022-30190
         

  2. **Docker Compose둜 λΉŒλ“œ 및 μ‹€ν–‰:**

root@kitploit:~
         
         docker compose up --build
         

  3. **μ›Ή μΈν„°νŽ˜μ΄μŠ€ 접속:**

     * λΈŒλΌμš°μ €μ—μ„œ http://localhost:8080λ₯Ό μ—¬μ„Έμš” 🌐



* * *

## μ‚¬μš© 방법

  * μ›Ή 폼을 μ‚¬μš©ν•˜μ—¬ IP μ£Όμ†Œλ₯Ό μž…λ ₯ν•˜κ³  μ…Έμ½”λ“œ νŒŒμΌμ„ μ—…λ‘œλ“œν•˜μ„Έμš”
  * μ•…μ„± Office λ¬Έμ„œλ₯Ό μƒμ„±ν•˜λ €λ©΄ **"νŽ˜μ΄λ‘œλ“œ 생성"**을 ν΄λ¦­ν•˜μ„Έμš”
  * μƒμ„±λœ λ¬Έμ„œλ₯Ό λ‹€μš΄λ‘œλ“œν•˜κ³  **ν†΅μ œλœ ν™˜κ²½** μ—μ„œ ν…ŒμŠ€νŠΈμ— μ‚¬μš©ν•˜μ„Έμš” πŸ”’



![Demo Screenshot](https://assets.kitploit.com/production/public/readmes/35609/79d3cda3c26ab5f3ce77a0c87bdfb84294913d9feeb75cd9301b92d7e4f08b66.png)

* * *

## ν”„λ‘œμ νŠΈ ꡬ쑰

root@kitploit:~
    
    
    src/main/java                 β€” Java source code (Spring Boot application)
    src/main/webapp/WEB-INF/jsp   β€” JSP views for the web interface
    Dockerfile                    β€” Container build instructions
    docker-compose.yml            β€” Multi-container orchestration
    

* * *

## 참고 자료

  * Microsoft λ³΄μ•ˆ ꢌ고
  * SocPrime의 Follina 뢄석
  * NIST CVE μ„ΈλΆ€ 정보



* * *

## λΌμ΄μ„ μŠ€

이 ν”„λ‘œμ νŠΈλŠ” MIT λΌμ΄μ„ μŠ€ ν•˜μ— λ°°ν¬λ©λ‹ˆλ‹€.