Common-Vulnerability-and-Exploit

Common-Vulnerability-and-Exploit-5638 This is the Apache Struts CVE-2017-5638 struts 2 vulnerability. The same CVE that resulted in the equifax database breach. A write up on how to apply, and patch against this exploit...

CVE-2024-53677-Docker

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code executio...

CVE-2017-5638-PoC

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repository contains a Proof of Concept PoC script demonstrating the Remote Code Execution RCE vulnerability identified as CVE-2017-5638 in Apache Struts 2. Vulnerability Details CVE ID: CVE-2017-5638 Affected Software: Apache Struts 2 versio...

struts2-rce

Exploit Demo para CVE-2017-5638 Completamente basado en https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Uso: Requisitos previos: tener instalados python, docker, maven y un jdk 1. clona este repositorio 2. ejecuta mvn clean package en la raíz del proyecto 3. ejecuta docker build -t ha...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

cve-2017-5638

CVE-2017-5638 Demo app of, yes, that data broker's security breach. Includes exploit code. Basic usage launch root@kitploit: mvn jetty:run Then go to http://localhost:8080/basic-struts/index.action. You should see the Welcome to Struts 2! message. Vulnerability scan root@kitploit: mvn site...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 XworkStruts RCE Vuln test script The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrar...

struts-rce-cve-2017-9805

Description Apache Struts RCE tool for CVE 2017-9805 Options u: the target url; c: the command that'll be executed on a vulnerable target; f: automatically checks for RCE using a list of targets one target per line; p: specify the port for a local listener - used with f option - default: 8080 Usa...

CVE-2024-53677

CVE-2024-53677 - Entorno de Laboratorio de Análisis de Causa Raíz de Apache Struts 2 Este repositorio proporciona un entorno basado en Docker para reproducir la vulnerabilidad CVE-2024-53677 en Apache Struts 2. Esta vulnerabilidad implica un traversal de ruta a través de la funcionalidad de carga...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

Stutsfi

Stutsfi An exploit for CVE-2017-5638 Remote Code Execution RCE Vulnerability in Apache Struts 2...

S2-055

S2-055 Exploit de vulnerabilidad de deserialización CVE-2017-7525 Proceso de explotación javac ExploitCommand.java root@kitploit: package exploit; import com.sun.org.apache.xalan.internal.xsltc.DOM; import com.sun.org.apache.xalan.internal.xsltc.TransletException; import...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 A simple script for exploit RCE for Struts 2 S2-053CVE-2017-12611 Usage root@kitploit: exploit.py Example root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

OgnlContentTypeRejectorValve

OgnlContentTypeRejectorValva Esta es una Valve para Tomcat7 que bloquea la vulnerabilidad de ejecución remota de código de Struts 2 CVE-2017-5638...

Apache-Struts-2-CVE-2017-5638-Exploit-

Apache-Struts-2-CVE-2017-5638-Exploit This exploit exploits the Apache Struts2 vulnerability CVE-2017-5638, allowing us to execute commands remotely on the apache server How to use: $ sudo python Struts2Shell001.py root@kitploit: ! Exploit Apache Struts2 DEMO Code of Rvbk + HOST con https Site wi...

svja

svja La RDPS Super Vulnerable Java Application es exactamente eso: una aplicación Java súper vulnerable creada para que todos puedan ver una variedad de vulnerabilidades comunes y, a menudo, "complejas". Este software se creó como parte del Roniel and DaRon Podcast Show...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX Exploit de shell interactivo de Struts 2 DefaultActionMapper para CVE-2013-225 S2-016 El DefaultActionMapper de Struts 2 admite un método para cambios de estado de navegación en cortocircuito, prefijando parámetros con "action:" o...

CVE-2017-5638

CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...