struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 A realistic scenario where a reference project for a framework is deployed on a container but with terrible consequences. To familiarise yourself look at the code and compile it. Also...

struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 PoC Exploits...

Common-Vulnerability-and-Exploit

Common-Vulnerability-and-Exploit-5638 This is the Apache Struts CVE-2017-5638 struts 2 vulnerability. The same CVE that resulted in the equifax database breach. A write up on how to apply, and patch against this exploit...

strutszeiro

strutszeiro Telegram Bot to manage botnets created with struts vulnerabilityCVE-2017-5638 Dependencies pip install -r requeriments.txt Config root@kitploit: Create a telegram bot, save the API token in config/token.conf Create a telegram group, save the group id in config/group.conf Start python...

Apache-Struts

Apache-Struts An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Nmap Recong nmap -p --script http-vuln-cve2017-5638 ' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id'...

cybersecurity-struts2

Apache Struts2 Vulnerability | CVE-2017-5638 | Version 2.5 Disclaimer This is meant for educational, and research purposes only. I do not authorize or endorse any illegal or unethical use of this projects contents or information Instructions To run the webapp: java -jar ms-cybersecurity-1.jar use...

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Usage: Pre-requisites: have python, docker, maven and a jdk installed 1. clone this repo 2. run mvn clean package in project root 3. run docker build -t hack . 4. run docker run -d -p...

CVE-2017-5638

This repository does not have a README...

apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 XworkStruts RCE Vuln test script The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrar...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

ExpStruts

ExpStruts ExpStruts is a php-based mass exploiter for CVE-2017-5638 .. Screenshots ⚠️ Requirements Python3 for MakMan's Google Scraper Abk Khan @asystolik...

Stutsfi

Stutsfi An exploit for CVE-2017-5638 Remote Code Execution RCE Vulnerability in Apache Struts 2...

Detection-struts-cve-2017-5638-detector

🚨 Real-Time Anomaly Detection for Apache Struts CVE-2017-5638 Zero-Day Exploit Detection Based on Streaming Analytics & Probabilistic Data Structures 📌 Project Description This project is a real-time anomaly detection system designed to detect RCE Remote Code Execution exploits on Apache Struts...

OgnlContentTypeRejectorValve

OgnlContentTypeRejectorValva This is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability CVE-2017-5638...

CVE-2017-5638-Apache-Struts2

This repository does not have a README...

Struts2Shell

Struts2Shell Un exploit y biblioteca para CVE-2017-5638 - el bug S2-045 de Apache Struts2. Instalación root@kitploit: $ npm install -g struts2shell Instalación como Biblioteca root@kitploit: $ npm install struts2shell Opciones de Línea de Comandos root@kitploit: -h, --help muestra información de...

Apache-Struts-2-CVE-2017-5638-Exploit-

Apache-Struts-2-CVE-2017-5638-Exploit This exploit exploits the Apache Struts2 vulnerability CVE-2017-5638, allowing us to execute commands remotely on the apache server How to use: $ sudo python Struts2Shell001.py root@kitploit: ! Exploit Apache Struts2 DEMO Code of Rvbk + HOST con https Site wi...