Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)
使用方法:
-t http://vuldomain.com //单个IP
-f urls.txt //读取文件批量扫描,采用多线程,速度快
-c command //自定义命令,默认是whoami
Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)
Python