Skip to content

README.md

Latest commit

 

History

History
29 lines (20 loc) · 1.4 KB

README.md

File metadata and controls

29 lines (20 loc) · 1.4 KB
Raw

Spring4ShellExploit

What Do we need

  1. JDK >= 9
  2. Tomcat 9
  3. Maven

Spring Application

Simple Spring Boot application when you can take input from POJO model

image

Application Just prints what it gets No Magic image

Deploy Application in tomcat

  1. Now use the exploit.py to deploy a jar in tomcat webapps
  2. image
  3. Now to the URL in the browser http://localhost:8080/shell.jsp?cmd=id. We can add anything in cmd. http://localhost:8080/shell.jsp?cmd=whoami

Output

image