{"uuid": "37b0418a-a59c-4a6e-96f2-a3d1ba59dd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22963", "type": "seen", "source": "https://t.me/hacking_Attack/51079", "content": "Features    Support for lists of URLs.  Fuzzing for more than 10 new Spring4Shell payloads (previously seen tools uses only 1-2 variants).  Fuzzing for HTTP GET and POST methods.  Automatic validation of the vulnerability (https://www.kitploit.com/search/label/Vulnerability) upon discovery.  Randomized and non-intrusive payloads.  WAF Bypass payloads.\n  Description  The Spring4Shell RCE is a critical vulnerability that FullHunt has been researching since it was released. We worked with our customers in scanning their environments for Spring4Shell and Spring Cloud RCE vulnerabilities.  We're open-sourcing an open detection scanning tool for discovering Spring4Shell (CVE-2022-22965) and Spring Cloud RCE (CVE-2022-22963) vulnerabilities. This shall be used by security teams to scan their infrastructure, as well as test for WAF bypasses that can result in achieving successful exploitation (https://www.kitploit.com/search/label/Exploitation) of the organization's environment.  If your organization requires help, please contact (team at fullhunt.io) directly for a full attack surface discovery (https://www.kitploit.com/search/label/Discovery) and scanning for the Spring4Shell vulnerabilities.  Usage  Management Platform.  [\u2022] Secure your External Attack Surface with FullHunt.io.  usage: spring4shell-scan.py [-h] [-u URL] [-p PROXY] [-l USEDLIST] [--payloads-file PAYLOADS_FILE] [--waf-bypass] [--request-type REQUEST_TYPE] [--test-CVE-2022-22963]    optional arguments:    -h, --help            show this help message and exit    -u URL, --url URL     Check a single URL.    -p PROXY, --proxy PROXY                          Send requests through proxy    -l USEDLIST, --list USEDLIST                          Check a list of URLs.    --payloads-file PAYLOADS_FILE                          Payloads file - [default: payloads.txt].    --waf-bypass          Extend scans with WAF bypass payloads.    --request-type REQUEST_TYPE                          Request Type: (get, post, all) - [Default: all].    --test-CVE-2022-22963                          Test for CVE-2022-22963 (https://www.kitploit.com/search/label/CVE-2022-22963) (Spring Cloud RCE).  \">$ ./spring4shell-scan.py -h\n[\u2022] CVE-2022-22965 - Spring4Shell RCE Scanner\n[\u2022] Scanner provided by FullHunt.io - The Next-Gen Attack Surface Management Platform.\n[\u2022] Secure your External Attack Surface with FullHunt.io.\nusage: spring4shell-scan.py [-h] [-u URL] [-p PROXY] [-l USEDLIST] [--payloads-file PAYLOADS_FILE] [--waf-bypass] [--request-type REQUEST_TYPE] [--test-CVE-2022-22963]\n\noptional arguments:\n  -h, --help            show this help message and exit\n  -u URL, --url URL     Check a single URL.\n  -p PROXY, --proxy PROXY\n                        Send requests through proxy\n  -l USEDLIST, --list USEDLIST\n                        Check a list of URLs.\n  --payloads-file PAYLOADS_FILE\n                        Payloads file - [default: payloads.txt].\n  --waf-bypass          Extend scans with WAF bypass payloads.\n  --request-type REQUEST_TYPE\n                        Request Type: (get,    post, all) - [Default: all].\n  --test-CVE-2022-22963\n                        Test for CVE-2022-22963 (Spring Cloud RCE).  Scan a Single URL  $ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local  Discover WAF bypasses against the environment  $ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local --waf-bypass  Scan a list of URLs  $ python3 spring4shell-scan.py -l urls.txt  Include checks for Spring Cloud RCE (CVE-2022-22963)  $ python3 spring4shell-scan.py -l urls.txt --test-CVE-2022-22963\n  Installation  $ pip3 install -r requirements.txt\n  Docker Support  git clone https://github.com/fullhunt/spring4shell-scan.git\ncd spring4shell-scan\nsudo docker build -t spring4shell-scan .\nsudo docker run -it --rm spring4shell-scan\n\n# With URL list \"urls.txt\" in current directory\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:55.258699Z"}