Spring4ShellExploit

---

What Do we need

1. JDK >= 9
2. Tomcat 9
3. Maven

---

Spring Application

Simple Spring Boot application when you can take input from POJO model

Application Just prints what it gets No Magic

Deploy Application in tomcat

1. Now use the exploit.py to deploy a jar in tomcat webapps
2. 
3. Now to the URL in the browser http://localhost:8080/shell.jsp?cmd=id. We can add anything in cmd. http://localhost:8080/shell.jsp?cmd=whoami

Output