Ri Chang Shen Tou Guo Cheng Zhong ,Jing Chang Hui Peng Dao Spring BootDa Jian De Wei Fu Wu ,Yu Shi Jiu Xiang Zuo Yi Ge Zhen Dui Spring BootDe Kai Yuan Shen Tou Kuang Jia ,Zhu Yao Yong Zuo Sao Miao Spring BootDe Min Gan Xin Xi Xie Lu Duan Dian ,Bing Ke Yi Zhi Jie Ce Shi SpringDe Xiang Guan Gao Wei Lou Dong . Yu Shi ,Jiu Xie Liao Zhe Yao Yi Ge Gong Ju :SpringBoot-Scan [(Jian Cheng :"SB-Scan"(Cuo Luan )]
Ben Xiang Mu De GitCodeDi Zhi :https://gitcode.com/AabyssZG/SpringBoot-Scan,Dang Qian Gong Ju Ban Ben Hao :V2.7.2-2025/11/09
Wo Huan Zheng Li Liao Yi Pian SpringBootDe Xiang Guan Shen Tou Zi Shi Zai Wo De Ge Ren Bo Ke ,Huan Ying Ge Wei Shi Fu Qian Lai Jiao Liu Ha Ha :https://blog.zgsec.cn/archives/129.html
Er , TODO
Lou Dong Zhi Chi De Geng Xin
- Gan Xie
@iChet666Shi Fu De Fan Kui ,Zhen Dui CVE-2021-21344 (Eureka_Xstream Fan Xu Lie Hua Lou Dong ) Zai Li Yong Guo Cheng Zhong Ke Neng Dao Zhi Po Pi Ye Wu De Qing Kuang ,Jin Xing Liu Cheng You Hua He ExpLi Yong Er Ci Que Ren - Gan Xie
@ez-lbzShi Fu Ti Jiao De PR,Tian Jia Zhi Chi CVE-2025-41243 (Spring Cloud GatewayHuan Jing Shu Xing Xiu Gai Lou Dong ) - Gan Xie
@ez-lbzShi Fu Ti Jiao De PR,Tian Jia Zhi Chi CVE-2024-37084 (Spring Cloud Data FlowYuan Cheng Ming Ling Zhi Xing Lou Dong ) - Tian Jia Zhi Chi 2023 JeeSpringCloud Ren Yi Wen Jian Shang Chuan Lou Dong
- Tian Jia Zhi Chi CVE-2022-22947 (Spring Cloud Gateway SpELRCELou Dong )
- Tian Jia Zhi Chi CVE-2022-22963 (Spring Cloud Function SpEL RCELou Dong )
- Tian Jia Zhi Chi CVE-2022-22965 (Spring Core RCELou Dong )
- Tian Jia Zhi Chi CVE-2021-21234 (Ren Yi Wen Jian Du Qu Lou Dong )
- Tian Jia Zhi Chi 2021 SnakeYAML_RCE Lou Dong
- Tian Jia Zhi Chi 2021 Eureka_Xstream Fan Xu Lie Hua Lou Dong
- Tian Jia Zhi Chi 2020 JolokiaPei Zhi Bu Dang Dao Zhi RCELou Dong
- Tian Jia Zhi Chi CVE-2018-1273(Spring Data Commons RCELou Dong )
- Zeng Jia Lou Dong Li Yong Xuan Ze Mo Kuai ,Ke Yi Xuan Ze Dan Yi Huo Duo Ge Lou Dong Jin Xing Jian Ce
- Ming Ling Zhi Xing Lou Dong Shi Zhi Chi Jiao Hu Shi Zhi Xing Ming Ling
- Zeng Jia Pi Liang Lou Dong Yan Zheng Mo Kuai (Ni Men Yi Zhi Xiang Yao De Lai La )
Hou Qi Jiang Jia Ru Geng Duo Lou Dong Li Yong Nei Zhi Mo Kuai (Ge Wei Shi Fu Neng Bu Neng Shang Ge StarMa ~ Ma Dai Ma Ting Xin Ku De Ha Ha )
Gong Neng Zhi Chi De Geng Xin
- Gan Xie
@kn1g78Shi Fu Ti Jiao De PR,Xiu Fu Liao Duan Dian Sao Miao De Ruo Gan BUG - Gan Xie
@ngc660secShi Fu Ti Jiao De PR,Dui Yu Zi Ding Yi Qing Qiu Tou Jin Xing Lei Xing Pan Duan ,Fang Zhi Er Ci Zhuan Huan Lei Xing - Gan Xie
@ThumpBoShi Fu Ti Chu De Jian Yi ,Zeng Jia Liao Du Qu Zhi Ding TXTPi Liang Sao Miao Min Gan Wen Jian De Gong Neng-dfBing Jiang Sao Miao Cheng Gong Jie Guo Dao Chu Zhidumpout.txtNei - Dui Xia Zai Min Gan Wen Jian De Mo Kuai Jin Xing Bao Cuo You Hua ,Jiang Bao Cuo Nei Rong Bing Ru Zhi
error.log - Gan Xie
@YanXi9999Shi Fu De Gong Xian ,Zai Du Qu Zhi Ding TXTBing Pi Liang Xin Xi Xie Lu Sao Miao Guo Cheng Zhong ,Qu Chu Zhong Fu Ye Mian Ti Gao Xiao Lu - Dui Duan Dian Bao Po Mo Kuai Jin Xing You Hua ,Dui Ye Mian Jin Xing HashJi Suan ,Ru Guo Fa Xian Ye Mian HashXiang Tong De Qing Kuang Jiu Bu Dao Ru Dao
urlout.txt - Zai Mu Lu Bao Po
run.py/POCTan Cepoc.py/Lou Dong Li Yongvul.pyZhe San Ge He Xin Mo Kuai ,Xin Zeng Quan Ju Bian Liangouttime = 10Ke Zi You Diao Zheng Ge Mo Kuai HTTPFang Wen Chao Shi Shi Jian - Gan Xie
@VikingShi Fu ,Zeng Jia Liao Bu FenDir.txtMin Gan Duan Dian Bao Po Zi Dian De Nei Rong - Gan Xie
@FkalisShi Fu ,Shi YongaiohttpDui Pi Liang Xin Xi Xie Lu Sao Miao Jin Xing Bing Fa Chu Li ,Da Da Ti Gao-ufCan Shu De Sao Miao Su Du - Xin Zeng Zhi Chi Duo Ge Can Shu Zi Ding Yi HTTPTou Bu (Qing Qiu Tou )Jin Xing Cao Zuo ,Gong Neng Shi Xian La ,Kuai Lai Shi Shi Ba ~
- Xin Zeng Zhi Chi Zi Chan Ce Hui Dao Chu De Shi Hou Zi Ding Yi Cha Xun Yu Ju ,Geng Jia Ling Huo De Dao Chu Mu Biao Zi Chan Shu Ju
- Xin Zeng Zai Min Gan Duan Dian Bao Po Bao Po (Dan Yi He Pi Liang )De Shi Hou Jin Xing Yan Shi Sao Miao ,Fang Zhi Sao Miao Su Du Tai Kuai Bei Lan Jie
- Xin Zeng HunterZi Chan Ce Hui Dao Chu Mo Kuai ,Zi Dong Dui Jie APIJie Kou Jiang Zi Chan Dao Chu Zhi
hunterout.txt - Xin Zeng FofaZi Chan Ce Hui Dao Chu Mo Kuai ,Zi Dong Dui Jie APIJie Kou Jiang Zi Chan Dao Chu Zhi
fofaout.txt - Xin Zeng ZoomEyeZi Chan Ce Hui Dao Chu Mo Kuai ,Zi Dong Dui Jie APIJie Kou Jiang Zi Chan Dao Chu Zhi
zoomout.txt - Zai SpringDuan Dian Bao Po De Shi Hou ,Xin Zeng Guo Lu Yi Xie Wu Xiao Hui Xian De Ye Mian ,Ti Gao Gong Zuo Xiao Lu
- Dui Duan Dian Bao Po Zi Dian Jin Xing You Hua ,Zeng Jia Yi Xie Rao Guo Yu Ju ,Ru Guo You Bu Chong Huan Ying Ti Jiao
- Zhi Chi Zi Dong Dui SpringJin Xing Zhi Wen Shi Bie
- Zai Lou Dong Li Yong Mo Kuai ,Dui Cuo Wu Jin Xing Shu Chu Wei
error.log - Zhi Chi Shi Yong Dai Ren Zheng De HTTPDai Li Jie Dian ,Zi Dong Jian Ce Jie Dian Zhuang Tai
- You
@13expShi Fu You Qing Zhi Zuo GUITu Xing Hua Ban Ben - Yan Zheng Dai Li Shi Fou Cun Huo ,Bing Ke Yi Shi Yong HTTPDai Li Ren Zheng ,Zhi Chi Shi Yong HTTP/HTTPSDai Li Suo You Liu Liang
- Sui Ji User-AgentQing Qiu Tou
- Jie Jue SSLZheng Shu Wen Ti (Zi Qian Ming Zheng Shu Qing Gai Cheng
http://Ji Ke ) - Zhi Neng Shi Bie Mu Biao Di Zhi (
example.comHehttp://example.com/Yi Jihttp://example.comDu Bu Hui Bao Cuo )
Zhu Ming
- Ben Gong Ju You Hua Liao Shi Yong Zhe Ti Yan ,Bu Guan Shi Dui Dan Yi URLSao Miao Huan Shi Du Qu TXTJin Xing Pi Liang Sao Miao ,
example.comHehttp://example.com/Yi Jihttp://example.comDu Bu Hui Bao Cuo ,Cheng Xu Hui Zi Xing Pan Duan Bing Shi Bie - Jie Jue Liao SSLZheng Shu Wen Ti ,Ke Yi Dui Cai Yong SSLZheng Shu De Spring BootKuang Jia Jin Xing Sao Miao (Zi Qian Ming Zheng Shu Qing Gai Cheng
http://Ji Ke ) - Dui Yu Er Ji Mu Lu Bu Shu De SpringXiang Mu ,Zhi Jie Gei Gong Ju Xiang Ying De Lu Jing Jiu Xing Liao (Bi Ru
example.com/test/Zhe Ge Lu Jing Bu Shu Liao SpringXiang Mu ,Na Zhi Jie Jiangexample.com/test/Chuan Can Gei Gong Ju Jiu Xing Liao )
GUITu Xing Hua Ban Ben ,You @13exp Shi Fu You Qing Zhi Zuo ,GUIDi Zhi :https://github.com/13exp/SpringBoot-Scan-GUI
Zhu :Yin Wei Ben Xiang Mu De vul.py He GUIXiang Mu Jun Bao Han Lou Dong Li Yong Mo Kuai ,Sha Ruan Bao Du He Cha Sha Wei Zheng Chang Qing Kuang . Ru Guo Jue De Gong Ju Bu Cuo ,Shi Fu Men Ke Yi Dian Ge StarHa Ha ~
San , An Zhuang PythonYi Lai Ku
pip install -r requirements.txt
Ru Guo pipAn Zhuang Su Du Man ,Ke Yi Cai Yong Guo Nei Yuan Jin Xing An Zhuang :
pip install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple/
Si , Gong Ju Shi Yong
Ru He Zhao Dao Hu Lian Wang Shang De SpringKuang Jia ,ZoomEyeYu Fa Ru Xia :
app:"Spring Framework"
FofaYu Fa Ru Xia :
icon_hash="116323821"||body="Whitelabel Error Page"
Ben Gong Ju De Can Shu Ru Xia :
# python3 SpringBoot-Scan.py
______ __ _______ __
/ \ | \ | \ | \
| $$$$$$\ ______ ______ \$$ _______ ______ | $$$$$$$\ ______ ______ _| $$_
| $$___\$$ / \ / \ | \| \ / \ | $$__/ $$ / \ / \| $$ \
\$$ \ | $$$$$$\| $$$$$$\| $$| $$$$$$$\| $$$$$$\| $$ $$| $$$$$$\| $$$$$$\\$$$$$$
_\$$$$$$\| $$ | $$| $$ \$$| $$| $$ | $$| $$ | $$| $$$$$$$\| $$ | $$| $$ | $$ | $$ __
| \__| $$| $$__/ $$| $$ | $$| $$ | $$| $$__| $$| $$__/ $$| $$__/ $$| $$__/ $$ | $$| \
\$$ $$| $$ $$| $$ | $$| $$ | $$ \$$ $$| $$ $$ \$$ $$ \$$ $$ \$$ $$
\$$$$$$ | $$$$$$$ \$$ \$$ \$$ \$$ _\$$$$$$$ \$$$$$$$ \$$$$$$ \$$$$$$ \$$$$
| $$ | \__| $$
| $$ \$$ $$ [+] V2.7.2-2025Nian Huan Du Guo Qing Jia Jie Ban
\$$ \$$$$$$ [+] Gan Xie Yi Lu Shang Zhi Chi He Guan Zhu Wo Men De Shi Fu
______
/ \ +-------------------------------------+
| $$$$$$\ _______ ______ _______ + Version: 2.7.2 +
| $$___\$$ / \| \ | \ + Author: Ceng Ge (@AabyssZG) +
\$$ \ | $$$$$$$ \$$$$$$\| $$$$$$$\ + Whoami: https://github.com/AabyssZG +
_\$$$$$$\| $$ / $$| $$ | $$ +-------------------------------------+
| \__| $$| $$_____| $$$$$$$| $$ | $$ + Duo Jin Cheng Su Du Ti Sheng : Fkalis +
\$$ $$ \$$ \\$$ $$| $$ | $$ + Whoami: github.com/WingBy-Fkalis +
\$$$$$$ \$$$$$$$ \$$$$$$$ \$$ \$$ +-------------------------------------+
Yong Fa :
Dui Dan Yi URLJin Xing Xin Xi Xie Lu Sao Miao : python3 SpringBoot-Scan.py -u http://example.com/
Du Qu Mu Biao TXTJin Xing Pi Liang Xin Xi Xie Lu Sao Miao : python3 SpringBoot-Scan.py -uf url.txt
Dui Dan Yi URLJin Xing Lou Dong Sao Miao : python3 SpringBoot-Scan.py -v http://example.com/
Du Qu Mu Biao TXTJin Xing Pi Liang Lou Dong Sao Miao : python3 SpringBoot-Scan.py -vf url.txt
Sao Miao Bing Xia Zai SpringBootMin Gan Wen Jian : python3 SpringBoot-Scan.py -d http://example.com/
Du Qu Mu Biao TXTJin Xing Pi Liang Min Gan Wen Jian Sao Miao : python3 SpringBoot-Scan.py -df url.txt
Shi Yong HTTPDai Li Bing Zi Dong Jin Xing Lian Tong Xing Ce Shi : python3 SpringBoot-Scan.py -p
Cong TXTWen Jian Zhong Dao Ru Zi Ding Yi HTTPTou Bu : python3 SpringBoot-Scan.py -t header.txt
Tong Guo ZoomEyeMi Yao Jin Xing APIXia Zai Shu Ju : python3 SpringBoot-Scan.py -z
Tong Guo FofaMi Yao Jin Xing APIXia Zai Shu Ju : python3 SpringBoot-Scan.py -f
Tong Guo HunterMi Yao Jin Xing APIXia Zai Shu Ju : python3 SpringBoot-Scan.py -y
Wu , Gong Ju Yan Shi
0# SpringZi Chan Ce Hui
Tong Guo ZoomEyeJin Xing SpringZi Chan Ce Hui
Ben Gong Ju Zhuan Men Dui Jie Liao ZoomEyeDe APIJie Kou ,Shi Yong API-KEYJi Ke Pi Liang Xia Zai SpringDe Zi Chan Ce Hui Shu Ju :
python3 SpringBoot-Scan.py -z
Zhu :Mu Qian Gai Mo Kuai Yi Jing Zhi Chi Zi Ding Yi Yu Fa De Zi Chan Ce Hui Dao Chu ;Zi Chan Ce Hui Jie Shu Hou ,Hui Ba Tong Guo APIXia Zai De Jie Guo Dao Chu Dao zoomout.txt,Jiu Ke Yi Shi Yong Qi Ta Can Shu Jin Xing Cao Zuo La
Tong Guo FofaJin Xing SpringZi Chan Ce Hui
Ben Gong Ju Zhuan Men Dui Jie Liao FofaDe APIJie Kou ,Shi Yong API-KEYJi Ke Pi Liang Xia Zai SpringDe Zi Chan Ce Hui Shu Ju :
python3 SpringBoot-Scan.py -f
Zhu :Mu Qian Gai Mo Kuai Yi Jing Zhi Chi Zi Ding Yi Yu Fa De Zi Chan Ce Hui Dao Chu ;Zi Chan Ce Hui Jie Shu Hou ,Hui Ba Tong Guo APIXia Zai De Jie Guo Dao Chu Dao fofaout.txt,Jiu Ke Yi Shi Yong Qi Ta Can Shu Jin Xing Cao Zuo La
Tong Guo HunterYing Tu Jin Xing SpringZi Chan Ce Hui
Ben Gong Ju Zhuan Men Dui Jie Liao Ying Tu De APIJie Kou ,Shi Yong API-KEYJi Ke Pi Liang Xia Zai SpringDe Zi Chan Ce Hui Shu Ju :
python3 SpringBoot-Scan.py -y
Zhu :Mu Qian Gai Mo Kuai Yi Jing Zhi Chi Zi Ding Yi Yu Fa De Zi Chan Ce Hui Dao Chu ;Zi Chan Ce Hui Jie Shu Hou ,Hui Ba Tong Guo APIXia Zai De Jie Guo Dao Chu Dao hunterout.txt,Jiu Ke Yi Shi Yong Qi Ta Can Shu Jin Xing Cao Zuo La
1# Ce Shi Bing Shi Yong Dai Li He Zi Ding Yi HTTPTou Bu
Ce Shi Bing Shi Yong Dai Li
python3 SpringBoot-Scan.py -p
python3 SpringBoot-Scan.py -p
Bi Ru Wo Xiang Dui Dan Yi URLJin Xing Xin Xi Xie Lu Sao Miao Bing Shi Yong Dai Li
python3 SpringBoot-Scan.py -u example.com -p
python3 SpringBoot-Scan.py -p
Tong Yang ,Qi Ta Can Shu (-u / -uf / -v / -vf / -d)Jun Ke Yi Pei He Dai Li Shi Yong
Ce Shi Bing Shi Yong Zi Ding Yi HTTPTou Bu (Zi Ding Yi Qing Qiu Tou )
python3 SpringBoot-Scan.py -t header.txt
Shi Yong Gai Zi Ding Yi HTTPTou Bu Gong Neng Qing Zi Xing Geng Gai header.txt Nei De Nei Rong ,Yun Xu (-u / -uf / -v / -d)Can Shu Shi Yong ,Yin Wei Pi Liang Lou Dong Sao Miao Mei You Ming Que Xu Qiu Gu Mei Jia Ru Gai Gong Neng
2# Dui Dan Yi URLJin Xing Min Gan Duan Dian Bao Po
Dir.txt Wei Nei Zhi De SpringDuan Dian Bao Po Zi Dian ,Wo Ji Ben Shou Ji Qi Liao Spring BootDe Xiang Guan Min Gan Xin Xi Xie Lu Duan Dian
Ru Guo You Yi Lou ,Huan Ying Ge Wei Shi Fu Gen Wo Lian Xi Ha Ha
python3 SpringBoot-Scan.py -u example.com
Xin Zeng Yan Shi Sao Miao Xuan Xiang ,Ru Guo Bu Xiang Yan Shi Sao Miao Shu Ru 0 Hui Che Ji Ke
Zhu :Sao Miao Jie Shu Hou ,Hui Ba Cheng Gong De Jie Guo Dao Chu Wei Tong Mu Lu Xia De urlout.txt
3# Du Qu Mu Biao TXTJin Xing Pi Liang Xin Xi Xie Lu Sao Miao
python3 SpringBoot-Scan.py -uf url.txt
Xin Zeng Yan Shi Sao Miao Xuan Xiang ,Ru Guo Bu Xiang Yan Shi Sao Miao Shu Ru 0 Hui Che Ji Ke ;Gan Xie @Fkalis Shi Fu ,Xin Zeng Bing Fa Sao Miao Xuan Xiang ,Mo Ren Bing Fa Shu Wei 10
Zhu :You Yu Ban Ben Geng Xin ,Zai 2.21Ban Ben Zhi Hou ,Du Qu TXTBing Sao Miao De Can Shu Gai Wei uf,Sao Miao Jie Shu Hou ,Hui Ba Cheng Gong De Jie Guo Dao Chu Wei Tong Mu Lu Xia De output.txt
4# Dui Dan Yi URLJin Xing Lou Dong Li Yong
python3 SpringBoot-Scan.py -v example.com
Yi Jing Shi Xian RCELou Dong ,Ming Ling Zi Ding Yi Gong Neng (Bu Yao Na Qu Gan Pi Shi E )
Tong Shi ,Hou Qi Jiang Jia Ru Geng Duo Lou Dong Li Yong Nei Zhi Mo Kuai ,Qing Shi Fu Men Jing Qing Qi Dai ~
5# Du Qu Mu Biao TXTJin Xing Pi Liang Lou Dong Sao Miao
python3 SpringBoot-Scan.py -vf url.txt
Ke Yi Zi You Xuan Ze Lou Dong Ku Li Mian De Lou Dong Jin Xing Pi Liang Yan Zheng ,Sao Miao Jie Shu Hou Jiang Dao Chu Cheng Gong De Nei Rong Zhi vulout.txt Nei
6# Sao Miao Bing Xia Zai SpringBootMin Gan Wen Jian
python3 SpringBoot-Scan.py -d example.com
Zhu :Sao Miao Dao De Min Gan Wen Jian ,Hui Zi Dong Xia Zai Dao Jiao Ben De Yun Xing Mu Lu ,You Jin Du Tiao Ke Yi Kan Dao Shi Shi Xia Zai Jin Du
Mu Qian Min Gan Wen Jian Mu Lu Nei Zhi Liao 5Ge ,Ru Xia :
actuator/heapdump
gateway/actuator/heapdump
heapdump
heapdump.json
hystrix.stream
artemis-portal/artemis/heapdump
7# Du Qu Mu Biao TXTJin Xing Pi Liang Min Gan Wen Jian Sao Miao
python3 SpringBoot-Scan.py -df url.txt
Sao Miao Jie Shu Hou Jiang Dao Chu Cheng Gong De Nei Rong Zhi dumpout.txt Nei
Ru Guo You Shi Fu You Qi Ta Min Gan Wen Jian De Mu Lu ,Ke Yi Ti Jiao issues,Xie Xie !!!
Liu , Mian Ze Sheng Ming
- Ru Guo Nin Xia Zai , An Zhuang , Shi Yong , Xiu Gai Ben Gong Ju Ji Xiang Guan Dai Ma ,Ji Biao Ming Nin Xin Ren Ben Gong Ju
- Zai Shi Yong Ben Gong Ju Shi Zao Cheng Dui Nin Zi Ji Huo Ta Ren Ren He Xing Shi De Sun Shi He Shang Hai ,Wo Men Bu Cheng Dan Ren He Ze Ren
- Ru Nin Zai Shi Yong Ben Gong Ju De Guo Cheng Zhong Cun Zai Ren He Fei Fa Xing Wei ,Nin Xu Zi Xing Cheng Dan Xiang Ying Hou Guo ,Wo Men Jiang Bu Cheng Dan Ren He Fa Lu Ji Lian Dai Ze Ren
- Qing Nin Wu Bi Shen Shen Yue Du , Chong Fen Li Jie Ge Tiao Kuan Nei Rong ,Te Bie Shi Mian Chu Huo Zhe Xian Zhi Ze Ren De Tiao Kuan ,Bing Xuan Ze Jie Shou Huo Bu Jie Shou
- Chu Fei Nin Yi Yue Du Bing Jie Shou Ben Xie Yi Suo You Tiao Kuan ,Fou Ze Nin Wu Quan Xia Zai , An Zhuang Huo Shi Yong Ben Gong Ju
- Nin De Xia Zai , An Zhuang , Shi Yong Deng Xing Wei Ji Shi Wei Nin Yi Yue Du Bing Tong Yi Shang Shu Xie Yi De Yue Shu