SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

DeliberatelyVulnerableWebApp

의도적으로 취약한 웹 애플리케이션 Struts 2 이 프로젝트는 Struts 2 프레임워크를 사용하는 Java 웹 애플리케이션입니다. Maven으로 빌드되었으며 Jetty 서버를 사용하여 실행할 수 있습니다. 사전 요구 사항 Java Development Kit JDK 8 이상 Apache Maven 3.6.0 이상 시작하기 프로젝트 빌드 mvn clean install Jetty로 프로젝트 실행 mvn jetty:run 애플리케이션 접속 웹 브라우저를 열고 http://localhost:8080/dvwa로 이동하세요. 프로젝...

S2-062

S2-062 CVE-2021-31805/s2-062 批量扫描および脆弱性悪用 法令・規制を遵守し、未承認のウェブサイトシステムへの攻撃を禁止します 使用方法 バッチスキャンモード python3 CVE-2021-31805.py -m scan -f 123.txt コマンド実行モード python3 CVE-2021-31805.py -u https://xxx.xxx.com:8080 -c id...

CVE-2023-50164-PoC

CVE-2023-50164（Apache Struts パストラバーサルからRCEへの脆弱性）- 概念実証 このPoCは、Apache Struts2の脆弱性を悪用してRCE（リモートコード実行）をテストするために作成されました。 イメージをビルドしてコンテナを実行します： $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc && docker run --rm -p 8080:8080 struts2-rce-poc エクスプロイトを実行します： $ cd exploit $ ./exploit.sh...

CVE-2021-31805

CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 CVE-2021-31805の解説記事で使用したアプリケーションです。 セットアップ $ docker-compose build $ docker-compose up -d 動作確認 http://localhost:8080/struts2-showcase-2.5.29/index.html にアクセスしWelcomeページが表示されることを確認します。 Exploit $ curl -I...

CVE-2023-50164

HackTheBox 랩을 위한 CVE-2023-50164 익스플로잇 설명 이 익스플로잇 은 HackTheBox 의 Strutted 랩을 위해 특별히 개발되었으며, Apache Struts 2의 CVE-2023-50164 취약점을 악용하는 것을 목표로 합니다. 이 결함은 파일 업로드 매개변수 처리의 오류를 통해 경로 탐색Path Traversal을 허용합니다. 이 익스플로잇은 공격자가 악성 파일 업로드 를 수행하고 원격 코드 실행RCE을 얻을 수 있는 방법을 시연하기 위해 만들어졌습니다. 참고: 이 익스플로잇 은...

s2-048

s2-048 s2-048, CVE-2017-9791에 대한 익스플로잇입니다. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...

CVE-2017-5638

CVE-2017-5638 이 스크립트는 Apache Struts 2 취약점CVE-2017-5638, 일명 Struts-Shock을 검증하기 위한 것입니다. 악성 페이로드를 주입하지 않고 오직 'STRUTS2-VALIDATION'이라는 HTTP 헤더만 주입하여 취약한지 여부를 검증할 수 있으므로 완전히 무해합니다. 멀티스레드 기능 덕분에 전 세계에 분산된 2.5k개 이상의 애플리케이션을 10분 이내에 실행할 수 있습니다. 따라서 대규모 엔터프라이즈 애플리케이션을 검증하는 데 매우 유용합니다. cve-2017-5638...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 XworkStruts RCE 취약점 테스트 스크립트 Apache Struts 2 2.3.x2.3.32 이전 및 2.5.x2.5.10.1 이전의 Jakarta Multipart 파서는 파일 업로드 시도 중 잘못된 예외 처리와 오류 메시지 생성으로 인해, 원격 공격자가 조작된 Content-Type, Content-Disposition 또는 Content-Length HTTP 헤더를 통해 임의의 명령을 실행할 수 있습니다. 이 취약점은 2017년 3월에 cmd= 문자열을 포함한...

Apache Struts 2 vulnerable to resource exhaustion

Overview Apache Struts 2 provided by The Apache Software Foundation contains the following vulnerability: Allocation of resources without limits or throttling CWE-770 - CVE-2026-73635 KuniyoshiNoguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Years-Old Vulnerable Apache Struts 2 Versions See 387K Weekly Downloads

Over 387,000 users downloaded vulnerable Apache Struts versions this week. Exclusive Sonatype research reveals a high-risk flaw found by AI. Is your system at risk?...

VulnCheck KEV: CVE-2013-2134

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135...

Log4Shell HTTP Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Log4Shell HTTP Scanner', 'Description' = %q Versions of Apache Log4j2 impacted by CVE-2021-44228 which allow JNDI features used in configuration,...

Critical Remote Code Execution Flaw Uncovered in Apache Struts 2

Summary: A significant vulnerability has been identified in the Apache Struts 2 open-source web application framework, labeled CVE-2023-50164. This flaw poses a severe risk of remote code execution and unauthorized path traversal. Threat Level - Red | Vulnerability Report For a detailed threat...

Decoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit

In this blog entry, we discuss the technical details of CVE-2023-50164, a critical vulnerability that affects Apache Struts 2 and enables unauthorized path traversal...

Observed Exploitation Attempts of Struts 2 S2-066 Vulnerability (CVE-2023-50164)

The Akamai Security Intelligence Group has seen numerous exploitation attempts on Apache Struts 2 since December 7, 2023, when a critical CVE was released...

The Apache Software Foundation Updates Struts 2

The Apache Software Foundation has released security updates to address a vulnerability CVE-2023-50164 in Struts 2. A remote attacker could exploit this vulnerability to take control of an affected system. Users and administrators are encouraged to review the Apache Security Bulletinlink is...

CVE-2023-50164

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this...

CVE-2023-50164

The Apache Struts 2 framework is vulnerable to a directory traversal flaw within its file upload logic. An attacker can manipulate file upload parameters to traverse directories and upload malicious files, which may lead to Remote Code Execution (RCE) . Active exploitation attempts have been obse...

CVE-2023-50164: Files or Directories Accessible to External Parties

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this...