hktalent/spring-spel-0day-poc external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

hktalent/spring-spel-0day-poc

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/hktalent/spring-spel-0day-poc)

Close

hktalent / spring-spel-0day-pocView on GitHubMore

• External links
• Readme badge

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

☆357Mar 5, 2023Updated 3 years ago

Alternatives and similar repositories for spring-spel-0day-poc

Users that are interested in spring-spel-0day-poc are comparing it to the libraries listed below

• craig / SpringCore0day

  View on GitHub
  SpringCore0day from https://share.vx-underground.org/ & some additional links
  ☆398Mar 31, 2022Updated 3 years ago
• lucksec / Spring-Cloud-Gateway-CVE-2022-22947

  View on GitHub
  CVE-2022-22947
  ☆222Mar 3, 2022Updated 4 years ago
• cckuailong / spring-cloud-function-SpEL-RCE

  View on GitHub
  spring-cloud-function SpEL RCE, Vultarget & Poc
  ☆135Mar 27, 2022Updated 3 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,011May 21, 2024Updated last year
• whwlsfb / Log4j2Scan

  View on GitHub
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆829Aug 4, 2023Updated 2 years ago
• sherlocksecurity / VMware-CVE-2022-22954

  View on GitHub
  POC for VMWARE CVE-2022-22954
  ☆282Apr 13, 2022Updated 3 years ago
• hktalent / AiCSA_pub

  View on GitHub
  AiCSA，Move to https://github.com/hktalent/AiCSA
  ☆10Apr 3, 2023Updated 2 years ago
• czz1233 / GBByPass

  View on GitHub
  冰蝎 哥斯拉 WebShell bypass
  ☆763Jan 15, 2026Updated last month
• Bonfee / CVE-2022-0995

  View on GitHub
  CVE-2022-0995 exploit
  ☆499Mar 27, 2022Updated 3 years ago
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆450Jun 14, 2022Updated 3 years ago
• Yihsiwei / GetOut360

  View on GitHub
  强制关闭360 需要管理员权限
  ☆171Feb 6, 2022Updated 4 years ago
• Ryze-T / CNVD-2022-10270-LPE

  View on GitHub
  基于向日葵RCE的本地权限提升，无需指定端口
  ☆210Feb 24, 2022Updated 4 years ago
• NyDubh3 / AnonymousSMBServer

  View on GitHub
  一个能快速开启和关闭匿名SMB共享的红队脚本
  ☆174Apr 6, 2022Updated 3 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• liangyueliangyue / spring-core-rce

  View on GitHub
  springFramework_CVE-2022-22965_RCE简单利用
  ☆26Apr 7, 2022Updated 3 years ago
• Puliczek / CVE-2021-44228-PoC-log4j-bypass-words

  View on GitHub
  🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
  ☆950Jan 15, 2022Updated 4 years ago
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆736Sep 9, 2024Updated last year
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,467Apr 25, 2024Updated last year
• f0ng / log4j2burpscanner

  View on GitHub
  CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks
  ☆840Jun 13, 2023Updated 2 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆269Mar 4, 2022Updated 4 years ago
• crazy0x70 / dingtalk-RCE

  View on GitHub
  ☆308Feb 16, 2022Updated 4 years ago
• Wrin9 / weaverOA_sql_RCE

  View on GitHub
  泛微OA_V9全版本的SQL远程代码执行漏洞
  ☆157Apr 20, 2022Updated 3 years ago
• Ryze-T / cdb-wds

  View on GitHub
  利用白名单文件 cdb.exe 执行 shellcode
  ☆215Jun 29, 2022Updated 3 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆769Jan 26, 2022Updated 4 years ago
• Rvn0xsy / PassDecode-jar

  View on GitHub
  帆软/致远密码解密工具
  ☆359Jul 29, 2021Updated 4 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆253Jul 12, 2023Updated 2 years ago
• whwlsfb / cve-2022-22947-godzilla-memshell

  View on GitHub
  CVE-2022-22947 注入Godzilla内存马
  ☆210Apr 26, 2022Updated 3 years ago
• UzJu / Cloud-Bucket-Leak-Detection-Tools

  View on GitHub
  六大云存储，泄露利用检测工具
  ☆1,243Mar 28, 2025Updated 11 months ago
• metaStor / SpringScan

  View on GitHub
  SpringScan 漏洞检测 Burp插件
  ☆605Nov 14, 2023Updated 2 years ago
• BeichenDream / CVE-2022-26134-Godzilla-MEMSHELL

  View on GitHub
  ☆342Jun 7, 2022Updated 3 years ago
• i11us0ry / goon

  View on GitHub
  goon,集合了fscan和kscan等优秀工具功能的扫描爆破工具。功能包含：ip探活、port扫描、web指纹扫描、title扫描、压缩文件扫描、fofa获取、ms17010、mssql、mysql、postgres、redis、ssh、smb、rdp、telnet、to…
  ☆811Aug 5, 2024Updated last year
• Ares-X / shiro-exploit

  View on GitHub
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆896May 28, 2021Updated 4 years ago
• Ptkatz / OrcaC2

  View on GitHub
  OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。
  ☆676Dec 30, 2022Updated 3 years ago
• ZZ-SOCMAP / CVE-2021-35587

  View on GitHub
  Oracle Access Manager Unauthenticated Attacker Vulnerability CVE-2021-35587
  ☆42Mar 14, 2022Updated 3 years ago
• colincowie / Safer_PoC_CVE-2022-22965

  View on GitHub
  A Safer PoC for CVE-2022-22965 (Spring4Shell)
  ☆44May 27, 2022Updated 3 years ago
• TryGOTry / DogCs4.4

  View on GitHub
  cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)
  ☆573Jan 17, 2023Updated 3 years ago
• SummerSec / ShiroAttack2

  View on GitHub
  shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
  ☆2,386Apr 10, 2024Updated last year
• tangxiaofeng7 / CVE-2022-33980-Apache-Commons-Configuration-RCE

  View on GitHub
  CVE-2022-33980 Apache Commons Configuration 远程命令执行漏洞
  ☆44Jul 8, 2022Updated 3 years ago
• 8ypass / weblogicExploit

  View on GitHub
  weblogic历史漏洞利用工具
  ☆91Jul 25, 2022Updated 3 years ago