reznok/Spring4Shell-POC external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

reznok/Spring4Shell-POC

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/reznok/Spring4Shell-POC)

Close

reznok / Spring4Shell-POCView on GitHubMore

• External links
• Readme badge

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit

☆325Aug 4, 2022Updated 3 years ago

Alternatives and similar repositories for Spring4Shell-POC

Users that are interested in Spring4Shell-POC are comparing it to the libraries listed below

• TheGejr / SpringShell

  View on GitHub
  Spring4Shell - Spring Core RCE - CVE-2022-22965
  ☆130Apr 4, 2022Updated 3 years ago
• BobTheShoplifter / Spring4Shell-POC

  View on GitHub
  Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965
  ☆374Nov 9, 2022Updated 3 years ago
• lunasec-io / Spring4Shell-POC

  View on GitHub
  This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).
  ☆106Aug 4, 2022Updated 3 years ago
• craig / SpringCore0day

  View on GitHub
  SpringCore0day from https://share.vx-underground.org/ & some additional links
  ☆397Mar 31, 2022Updated 3 years ago
• fullhunt / spring4shell-scan

  View on GitHub
  A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities
  ☆657Apr 7, 2022Updated 3 years ago
• viniciuspereiras / CVE-2022-22965-poc

  View on GitHub
  CVE-2022-22965 poc including reverse-shell support
  ☆13Nov 29, 2023Updated 2 years ago
• kh4sh3i / Spring-CVE

  View on GitHub
  This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spri…
  ☆14Mar 31, 2022Updated 3 years ago
• z92g / ZentaoSqli

  View on GitHub
  Zentao v16.5 SQL Injection POC
  ☆75Jul 30, 2022Updated 3 years ago
• Wrin9 / weaverOA_sql_RCE

  View on GitHub
  泛微OA_V9全版本的SQL远程代码执行漏洞
  ☆157Apr 20, 2022Updated 3 years ago
• 0x7eTeam / CVE-2022-22947

  View on GitHub
  CVE-2022-22947_EXP,CVE-2022-22947_RCE,CVE-2022-22947反弹shell,CVE-2022-22947 getshell
  ☆36Mar 8, 2022Updated 3 years ago
• lucksec / Spring-Cloud-Gateway-CVE-2022-22947

  View on GitHub
  CVE-2022-22947
  ☆222Mar 3, 2022Updated 3 years ago
• whwlsfb / cve-2022-22947-godzilla-memshell

  View on GitHub
  CVE-2022-22947 注入Godzilla内存马
  ☆210Apr 26, 2022Updated 3 years ago
• coffeehb / Spring4Shell

  View on GitHub
  一个Spring4Shell 被动式检测的Burp插件
  ☆93Apr 8, 2022Updated 3 years ago
• horizon3ai / CVE-2022-22972

  View on GitHub
  ☆153May 26, 2022Updated 3 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• timwhitez / gobusterdns

  View on GitHub
  lite version of gobuster. Only subdomain brute. 内网轻量化子域名爆破工具
  ☆44Jun 25, 2021Updated 4 years ago
• pyroxenites / s2-062

  View on GitHub
  远程代码执行S2-062 CVE-2021-31805验证POC
  ☆131Dec 1, 2025Updated 3 months ago
• linshaoSec / SeeyonExploit-GUI

  View on GitHub
  致远OA综合利用工具
  ☆231Dec 31, 2021Updated 4 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• jbaines-r7 / through_the_wire

  View on GitHub
  CVE-2022-26134 Proof of Concept
  ☆169Jun 6, 2022Updated 3 years ago
• Bouquets-ai / CVE-2022-22965-GUItools

  View on GitHub
  spring-core单个图形化利用工具，CVE-2022-22965及修复方案已出
  ☆17Apr 2, 2022Updated 3 years ago
• hosch3n / msmap

  View on GitHub
  Msmap is a Memory WebShell Generator.
  ☆584Apr 22, 2023Updated 2 years ago
• Pear1y / CVE-2022-26133

  View on GitHub
  Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.
  ☆148May 11, 2022Updated 3 years ago
• hillu / local-spring-vuln-scanner

  View on GitHub
  Simple local scanner for applications containing vulnerable Spring libraries
  ☆125Aug 1, 2022Updated 3 years ago
• yqcs / ZheTian

  View on GitHub
  ::ZheTian / 强大的免杀生成工具，Bypass All.
  ☆754Feb 7, 2025Updated last year
• Peony2022 / shiro_killer

  View on GitHub
  批量ShiroKey检测爆破工具
  ☆308Jan 4, 2023Updated 3 years ago
• f0ng / log4j2burpscanner

  View on GitHub
  CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks
  ☆840Jun 13, 2023Updated 2 years ago
• hktalent / golang-RCE-0day-POC

  View on GitHub
  golang RCE 0day POC
  ☆71Apr 1, 2022Updated 3 years ago
• bigsizeme / Log4j-check

  View on GitHub
  log4J burp被扫插件、CVE-2021-44228、支持dnclog.cn和burp内置DNS、可配合JNDIExploit生成payload
  ☆70Dec 13, 2021Updated 4 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,238Oct 1, 2022Updated 3 years ago
• hktalent / spring-spel-0day-poc

  View on GitHub
  spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963
  ☆357Mar 5, 2023Updated 2 years ago
• Phuong39 / Ortau

  View on GitHub
  一个用于隐藏C2的、开箱即用的反向代理服务器。 旨在省去繁琐的配置Nginx服务的过程。
  ☆45Dec 18, 2021Updated 4 years ago
• me2nuk / CVE-2022-22965

  View on GitHub
  Spring Framework RCE via Data Binding on JDK 9+ / spring4shell / CVE-2022-22965
  ☆14Apr 4, 2022Updated 3 years ago
• 8ypass / weblogicExploit

  View on GitHub
  weblogic历史漏洞利用工具
  ☆91Jul 25, 2022Updated 3 years ago
• metaStor / SpringScan

  View on GitHub
  SpringScan 漏洞检测 Burp插件
  ☆605Nov 14, 2023Updated 2 years ago
• Wrin9 / weaverOA_v9_ALL_upload_RCE

  View on GitHub
  泛微OA_V9全版本前台任意文件上传漏洞
  ☆29Apr 26, 2022Updated 3 years ago
• hakivvi / CVE-2022-29464

  View on GitHub
  WSO2 RCE (CVE-2022-29464) exploit and writeup.
  ☆377Apr 27, 2022Updated 3 years ago
• A-D-Team / grafanaExp

  View on GitHub
  A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …
  ☆268Oct 17, 2025Updated 4 months ago
• jfrog / jfrog-spring-tools

  View on GitHub
  ☆79Apr 6, 2022Updated 3 years ago