SummerSec/SpringBootExploit

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1897 stars · 308 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Java GUI tool for quickly exploiting Spring Boot actuator/env page vulnerabilities, built from the LandGrey SpringBootVulExploit checklist. It automates environment detection and memory shell injection, designed to lower the exploitation barrier during red team engagements (HVV).

Use cases

• exploit spring boot env endpoint vulnerabilities
• detect spring boot vulnerabilities automatically
• inject memory shells into spring boot apps
• quickly verify spring boot RCE during red team exercises
• lower the barrier for exploiting spring boot misconfigurations

When to choose

• you need a fast GUI-driven exploit tool for Spring Boot env/actuator exposures during authorized penetration tests or HVV
• you want automated vulnerability detection plus memory shell injection in one tool
• you already use or can deploy JNDIExploit as the payload server

When to avoid

• you need a general-purpose web vulnerability scanner beyond Spring Boot
• you require stealthy or low-noise exploitation with extensive evasion options
• you want a maintained tool with frequent updates and broad framework coverage

Facets

application · maturity maintenance

penetration-testing security gui security penetration-testing developer-tools cross-platform jvm spring-boot exploitation red-team jndi memory-shell hvv vulnerability-scanning

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SummerSec/SpringBootExploit")