Scanner to detect the Spring4Shell vulnerability on input URLs
Scanner to detect the Spring4Shell vulnerability on input URLs
Note: Detection Script has been tested on applications deployed using Apache Tomcat Server
Prerequisite’s
- python3
- python3 -m pip install -r requirements.txt
Usage
python3 detect.py –help
usage: detect.py [-h] [--file FILE] --url URL [--debug] [--get] [--post] [--ver]
options:
-h, --help show this help message and exit
--file FILE File containing Form Endpoints
--url URL target Form Endpoints
--debug Print errors
--get Use Get Method
--post Use Post Method
--ver Perform