├── Dockerfile ├── LICENSE.md ├── README.md ├── app ├── pom.xml └── src │ └── main │ ├── java │ └── com │ │ └── foco │ │ └── helloworld │ │ ├── Greeting.java │ │ ├── HelloController.java │ │ └── HelloworldApplication.java │ └── resources │ ├── application.properties │ └── templates │ └── hello.html ├── docker-compose.yml ├── exploit.sh └── flag /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/LICENSE.md -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/README.md -------------------------------------------------------------------------------- /app/pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/app/pom.xml -------------------------------------------------------------------------------- /app/src/main/java/com/foco/helloworld/Greeting.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/app/src/main/java/com/foco/helloworld/Greeting.java -------------------------------------------------------------------------------- /app/src/main/java/com/foco/helloworld/HelloController.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/app/src/main/java/com/foco/helloworld/HelloController.java -------------------------------------------------------------------------------- /app/src/main/java/com/foco/helloworld/HelloworldApplication.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/app/src/main/java/com/foco/helloworld/HelloworldApplication.java -------------------------------------------------------------------------------- /app/src/main/resources/application.properties: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /app/src/main/resources/templates/hello.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/app/src/main/resources/templates/hello.html -------------------------------------------------------------------------------- /docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/docker-compose.yml -------------------------------------------------------------------------------- /exploit.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FourCoreLabs/spring4shell-exploit-poc/HEAD/exploit.sh -------------------------------------------------------------------------------- /flag: -------------------------------------------------------------------------------- 1 | SPRING4SHELL{JAVA_IS_NOT_THAT_SAFE_NOW?} 2 | --------------------------------------------------------------------------------