AWS, Amazon Redshift, SQL Server administration and T-SQL development, Web Programming with ASP.NET, HTML5 and Javascript, SAP Smartforms and ABAP Programming, Windows 7, Visual Studio and MS Office software
Development resources, articles, tutorials, code samples, tools and downloads for AWS Amazon Web Services, Redshift, AWS Lambda Functions, S3 Buckets, VPC, EC2, IAM

How to Execute Spring Vulnerability Scanner on AWS Linux AMI

In this tutorial, I want to share how AWS developers can download and execute Spring Vulnerability Scanner from GitHub project on an AWS EC2 instance based on Linux.

If you want to scan your servers to identify if your applications are vulnerable for the SpringShell CVE-2022-22965 vulnerability, you can follow the steps in this guide on an AWS Linux instance.
For more about the Local Spring Vulnerability Scanner, you can check the readme documentation and the instructions for the vulnerability scanner on Github project

I want to share how AWS developers can download and run the Spring vulnerability scanner on EC2 instances.

Connect to EC2 instance on AWS Management Console using Session Manager

Create a new folder where you will later download the Spring Vulnerability Scanner using mkdir command

sudo mkdir SpringVulnerabilityScanner
Create Directory

create directory

Now enter the folder you have created

cd SpringVulnerabilityScanner
Change Directory

change directory

We can now download the executable scanner file into this current directory by executing below command

Download Scanner File

If you get a "Permission denied" error message you can execute the same command with sudo as follows

sudo wget

When I execute above command on a sample EC2 instance, I got following message indicating that the scanner file is successfully downloaded into the working directory.

download vulnerability scanner with wget

When you display the permissions of the downloaded scanner file you will see it is set to read only

ls -ll
List Files

spring vulnerability scanner file attributes

We can now change the file attributes from read only file to executable file using chmod

sudo chmod +x local-spring-vuln-scanner
Change File Permissions

Let's now validate the change

ls -ll

change file attributes

Let's now run the scanner file by running below command within the directory where you downloaded the Spring Vulnerability scanner

./local-spring-vuln-scanner --verbose
Run Scanner

execute scanner file for Spring Vulnerability

Please note that while running the spring vulnerability scanner file you can provide following attributes which is explined in detail at GitHub Local Spring Vulnerability Scanner

$ ./local-spring-vuln-scanner [--verbose] [--quiet] \
   [--exclude /path/to/exclude …] \
   [--scan-network] \
   [--log /path/to/file.log] \
   /path/to/app1 /path/to/app2 …
Input Arguments

If a vulnerable component is detected by the scanner, those vulnerable components will be listed within the output data

Hope this short guide is useful for who try to execute the Spring Vulnerability Scanner file on their EC2 instances on AWS platform.


Copyright © 2004 - 2021 Eralper YILMAZ. All rights reserved.