CVE-2022-33980

This repository contains a functional PoC for CVE-2022-33980, demonstrating RCE in Apache Commons Configuration via script interpolation. The exploit leverages the `ConfigurationInterpolator` to execute arbitrary JavaScript code, triggering command execution.

This repository contains a functional exploit PoC for CVE-2022-33980, demonstrating RCE via Apache Commons Configuration's interpolation features. The code leverages script, URL, and DNS lookups to execute arbitrary commands, such as launching the macOS Calculator app.

This repository contains a functional PoC for CVE-2022-33980, demonstrating a script interpolation vulnerability in Apache Commons Configuration that allows arbitrary code execution via crafted input strings. The Java code includes a loop to accept user input and process it using the vulnerable interpolator.

This repository contains a functional Python exploit for CVE-2022-42889 (Apache Commons Text RCE). The script generates a reverse shell payload using msfvenom, delivers it via a crafted HTTP request leveraging the vulnerable string interpolation feature, and executes it on the target system.

This repository contains a functional PoC for CVE-2022-33980, demonstrating a remote code execution vulnerability in Apache Commons Configuration via unsafe interpolation. The exploit leverages a Spring Boot application to expose an endpoint that triggers the vulnerability.