sspsec/Scan-Spring-GO

What it solves

Scan-Spring-GO (SSP) is a vulnerability scanning and exploitation tool specifically designed for the Spring framework ecosystem. It automates the process of identifying fingerprints, detecting vulnerabilities (such as RCE and information leaks), and executing exploits in a structured way, reducing the manual effort required for penetration testing of Spring-based applications.

How it works

The tool is implemented in Go and uses a modular interface for vulnerability detection and exploitation. It supports 17 different vulnerability modules (including CVEs like Spring4Shell) and a dictionary-based approach for detecting information leaks in endpoints like actuator, swagger, and druid. It can operate as a CLI tool or as an MCP (Model Context Protocol) server, allowing AI agents (like Claude Desktop or Cursor) to trigger scans and exploits via structured JSON output.

Who it’s for

Security researchers, penetration testers, and developers who need to audit the audit the security of Spring Boot applications.

Highlights

• AI-Integrated Workflow: Built-in MCP server allows AI clients to automate the entire chain from fingerprinting to exploitation.
• Modular Design: 17 unified vulnerability modules for easy extension and extension of new CVEs.
• Dual Mode: Supports both a standard CLI for manual use and an MCP server for AI-driven automation.
• Comprehensive Coverage: Detects RCE, SpEL injection, deserialization, and information leaks across various Spring components.
• Safety Controls: Includes target whitelisting (--scope) and explicit switches for exploitation capabilities when running in MCP mode.