{"uuid": "5bc2b39f-cd0e-49ba-9586-53402a2ca6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22965", "type": "seen", "source": "https://t.me/hacking_Attack/56907", "content": "Kali Linux Tutorials\nSpring4Shell-Scan : A Fully Automated, Reliable, And Accurate Scanner For Finding Spring4Shell\n\nSpring4Shell-Scan is a fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities.\n\nFeatures\n\n* Support for lists of URLs.\n* Fuzzing for more than 10 new Spring4Shell payloads (previously seen tools uses only 1-2 variants).\n* Fuzzing for HTTP GET and POST methods.\n* Automatic validation of the vulnerability upon discovery.\n* Randomized and non-intrusive payloads.\n* WAF Bypass payloads.\n\nDescription\n\nThe Spring4Shell RCE is a critical vulnerability that FullHunt has been researching since it was released. We worked with our customers in scanning their environments for Spring4Shell and Spring Cloud RCE vulnerabilities.\n\nWe\u2019re open-sourcing an open detection scanning tool for discovering Spring4Shell (CVE-2022-22965) and Spring Cloud RCE (CVE-2022-22963) vulnerabilities. This shall be used by security teams to scan their infrastructure, as well as test for WAF bypasses that can result in achieving successful exploitation of the organization\u2019s environment.\n\nIf your organization requires help, please contact (team at fullhunt.io) directly for a full attack surface discovery and scanning for the Spring4Shell vulnerabilities.\n\nUsage\n\n$ ./spring4shell-scan.py -h\n[\u2022] CVE-2022-22965 \u2013 Spring4Shell RCE Scanner\n[\u2022] Scanner provided by FullHunt.io \u2013 The Next-Gen Attack Surface Management Platform.\n[\u2022] Secure your External Attack Surface with FullHunt.io.\nusage: spring4shell-scan.py [-h] [-u URL] [-p PROXY] [-l USEDLIST] [\u2013payloads-file PAYLOADS_FILE] [\u2013waf-bypass] [\u2013request-type REQUEST_TYPE] [\u2013test-CVE-2022-22963]\noptional arguments:\n-h, \u2013help show this help message and exit\n-u URL, \u2013url URL Check a single URL.\n-p PROXY, \u2013proxy PROXY\nSend requests through proxy\n-l USEDLIST, \u2013list USEDLIST\nCheck a list of URLs.\n\u2013payloads-file PAYLOADS_FILE\nPayloads file \u2013 [default: payloads.txt].\n\u2013waf-bypass Extend scans with WAF bypass payloads.\n\u2013request-type REQUEST_TYPE\nRequest Type: (get, post, all) \u2013 [Default: all].\n\u2013test-CVE-2022-22963\nTest for CVE-2022-22963 (Spring Cloud RCE).\n\nScan a Single URL\n\n$ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local\n\nDiscover WAF bypasses against the environment\n\n$ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local \u2013waf-bypass\n\nScan a list of URLs\n\n$ python3 spring4shell-scan.py -l urls.txt\n\nInclude checks for Spring Cloud RCE (CVE-2022-22963)\n\n$ python3 spring4shell-scan.py -l urls.txt \u2013test-CVE-2022-22963\n\nInstallation\n\n$ pip3 install -r requirements.txt\n\nDocker Support\n\ngit clone https://github.com/fullhunt/spring4shell-scan.git\ncd spring4shell-scan\nsudo docker build -t spring4shell-scan .\nsudo docker run -it \u2013rm spring4shell-scan\nWith URL list \u201curls.txt\u201d in current directory\ndocker run -it \u2013rm -v $PWD:/data spring4shell-scan -l /data/urls.txt\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.796542Z"}