54 matches found
struts-pwn_CVE-2018-11776
struts-pwn - Exploit para CVE-2018-11776 Un exploit para Apache Struts CVE-2018-11776 Uso Comprobar si la vulnerabilidad existe en una sola URL. python struts-pwn.py --url 'http://example.com/demo/struts2-showcase/index.action' Comprobar si la vulnerabilidad existe en una lista de URLs. python...
S2-057-CVE-2018-11776
S2-057-CVE-2018-11776 Un exploit simple para Apache Struts RCE S2-057 CVE-2018-11776 IMPORTANTE: Se proporciona solo con fines educativos o informativos. Desplegar entorno de prueba root@kitploit: git clone https://github.com/vulhub/vulhub cd vulhub/struts2/s2-057 docker-compose up -d Uso...
cve-2018-11776
CVE-2018-11776 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-11776 Image author: https://github.com/knqyf263/CVE-2018-11776...
Apache-Struts-0Day-Exploit
Apache-Struts-0Day-Exploit Vulnerabilidad crítica de ejecución remota de código CVE-2018-11776 encontrada en Apache Struts. Instalación git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Uso: python ApacheStruts.py URL : www.example.com/ Shell : "Comandos" p.ej. ls, dir, whoami...
Apache-Struts-Shodan-Exploit
POC DE EXPLOTACIÓN DE APACHE STRUTS SHODAN Autor: @037 El código original se puede encontrar aquí. Esta herramienta aprovecha CVE-2018-11776 y Shodan para realizar explotación masiva de servidores Apache Struts verificados y vulnerables. El parámetro de búsqueda de Shodan se ha omitido para...
ApacheStruts-CVE-2018-11776
Apache Struts CVE-2018-11776 Python PoC Esto está basado en https://github.com/hook-s3c/CVE-2018-11776-Python-PoC. La construcción del contenedor y las instrucciones no funcionaron como se describe en el README, por lo que se creó este fork. El exploit de PoC utilizado es de Rapid7...
cve-2018-11776-docker
Contenedor Docker y exploit PoC de CVE-2018-11776 escrito en Go Puedes construir tu propia imagen y ejecutarla: root@kitploit: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename O simplemente puedes usar la que creé con cariño para ti: root@kitploit: docker...
Strutter
Strutter Prueba de concepto para CVE-2018-11776, viene completa con la capacidad de buscar en la API de Shodan objetivos CVE-2018-11776 Apache Struts versiones 2.3 a 2.3.34 y 2.5 a 2.5.16 sufren de posible Ejecución Remota de Código al usar resultados sin espacio de nombres y al mismo tiempo, sus...
apche-struts-vuln-demo-cve-2018-11776
Demostración de Vulnerabilidad Apache Struts CVE-2018-11776 Descripción Crea un entorno de prueba aislado para experimentar con la vulnerabilidad CVE-2018-11776 de Apache Struts. Comenzando Para iniciar el entorno de prueba, ejecute el siguiente comando: root@kitploit: aws cloudformation...
CVE-2018-11776
CVE-2018-11776 Script PoC para esta vulnerabilidad...
Apache Struts2 S2-057 - Remote Code Execution
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible remote code execution when alwaysSelectFullNamespace is true either by user or a plugin like Convention Plugin and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace...
australiafair.com.au Cross Site Scripting vulnerability OBB-3770117
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
K60499474: Apache Struts vulnerability CVE-2018-11776
Security Advisory Description Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper actions have no or wildcard namespace. Same possibility when using url tag which doesn't have value and...
leadform.batscrm.com Cross Site Scripting vulnerability OBB-1408944
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
MySQL Enterprise Monitor 3.4.x < 3.4.10 / 4.x < 4.0.7 / 8.x < 8.0.3 Multiple Vulnerabilities (Oct 2018 CPU)
According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by the following vulnerabilities in its subcomponents: - Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is...
Oracle Enterprise Manager Cloud Control (Jul 2020 CPU)
The 13.3.0.0, 13.4.0.0, and 12.1.0.5 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager...
Exploit for CVE-2018-11776
GitHub Security Lab This is the main git repository of GitHu...
Exploit for CVE-2018-11776
Apache-Struts-0Day-Exploit Critical Remote Code Execution...