CVE-2020-17530

CVE-2020-17530 Struts2 S2-061 Remote Command Execution Vulnerability CVE-2020-17530 Usage: root@kitploit: python CVE-2020-17530.py -u url python CVE-2020-17530.py -f file.txt python CVE-2020-17530.py -f file.txt -o outfile.txt python CVE-2020-17530.py -f file.txt -p socks5://127.0.0.1:7890 python...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

CVE-2017-5638

LAB 1 — Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045 I. SYSTEM ANALYSIS Attack Surface Analysis After starting the container, Struts2 logs show that the application loads familiar configuration files such as struts-default.xml , struts-plugin.xml , and struts.xml. This confirms that the...

CVE-2017-5638-Attack-and-Defense

Apache Struts2 S2-045 Defense & Exploitation Lab A Docker-based security lab demonstrating both exploitation and defense against the Apache Struts2 S2-045 vulnerability CVE-2017-5638. This lab includes: 1. Vulnerable Application : Struts 2.3.31 vulnerable to S2-045 for exploitation demonstration ...

-CVE-2017-9805-

Vulnerability information Resources: https://vulners.com/cve/CVE-2017-9805 What is this? A python exploit script capable of executing remote commands into the shell of a system hosting a Struts2 vulnerable to S2-052. Usage python s2-052.py --target 'http://192.168.0.233/orders/3' --command "echo...

S2-055

S2-055 Deserialization Vulnerability Exploit CVE-2017-7525 Exploitation Process javac ExploitCommand.java root@kitploit: package exploit; import com.sun.org.apache.xalan.internal.xsltc.DOM; import com.sun.org.apache.xalan.internal.xsltc.TransletException; import...

CVE-2018-11776

CVE-2018-11776 On August 23, 2018, Apache Struts 2 released its latest security advisory, revealing a high-risk remote code execution vulnerability. Reported by a security researcher from the Semmle Security Research team, this vulnerability is tracked as CVE-2018-11776 S2-057. If the namespace...

CVE-2024-53677-S2-067-thread

Disclaimer Do not use the related technologies in this article for illegal testing. Any direct or indirect consequences and losses caused by the dissemination or use of the information or tools provided in this article are solely the responsibility of the user. All adverse consequences arising fr...

CVE-2024-53677-S2-067

🚨🚨 CVE-2024-53677-S2-067🚨🚨 Security Advisory: CVE-2024-53677 – Critical Apache Struts Remote Code Execution Vulnerability Advisory Date: December 14, 2024 CVE ID: CVE-2024-53677 CVSS Score: 9.5 Critical Overview A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache...

CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...

Struts2Shell

Struts2Shell An exploit and library for CVE-2017-5638 - Apache Struts2 S2-045 bug. Installation root@kitploit: $ npm install -g struts2shell Installation as Library root@kitploit: $ npm install struts2shell Command Line Options root@kitploit: -h, --help output usage information -V, --version outp...

st2-046-poc

Struts2 Content-Disposition filename null-byte variant of CVE-2017-5638 Struts2 Security Bulletin S2-046 A null byte \x00 in a request¡¯s Content-Disposition header filename field can trigger a InvalidFileNameException with the same client controlled filename string in the exception message that ...

CVE-2016-4438

ref: https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037PoC.py https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037CmdToolExP.py...

Apache-struts-cve-2024-53677

Apache Struts 远程代码执行漏洞 CVE ID：CVE-2024-53677 Youtube：视频 PoC 致谢：CVE-2024-53677-S2-067...

gha-lab-6ab39df295

Artefacto de investigación automatizado — no es el proyecto original. Este repositorio es un laboratorio desechable construido por un sistema automatizado para una tesis de maestría en la Université Laval sobre la reproducción de vulnerabilidades publicadas en flujos de trabajo de GitHub Actions...

S2-062

S2-062 CVE-2021-31805/s2-062 批量扫描及漏洞利用 请遵守法律法规，禁止未授权攻击网站系统 使用说明 批量扫描模式 root@kitploit: python3 CVE-2021-31805.py -m scan -f 123.txt 命令执行模式 root@kitploit: python3 CVE-2021-31805.py -u https://xxx.xxx.com:8080 -c id...

CVE-2021-31805

CVE-2021-31805 远程代码执行 S2-062 CVE-2021-31805 由于 Apache Struts2 对 S2-061 CVE-2020-17530 的修复不完整，某些标签属性仍可执行 OGNL 表达式，该漏洞允许攻击者构造恶意数据以远程执行任意代码。 CVE202131805POCEXP.py POC pocsuite -r CVE202131805POCEXP.py -u url EXP pocsuite -r CVE202131805POCEXP.py -u url --attack --command "command" 免责声明...

Struts2_S2-062_CVE-2021-31805

Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062远程代码执行漏洞CVE-2021-31805 | 反弹Shell 漏洞复现环境 docker-compose.yml root@kitploit: version: '2' services: struts2: image: vulhub/struts2:2.5.25 ports: - "8080:8080" 拉取镜像启动环境 root@kitploit: docker-compose up -d 访问地址：http://1.1.1.1:8080 漏洞验证脚本 root@kitploit:...

S2-045

S2-045 Struts2 S2-045 Vulnerability environment...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 一个用于利用 Struts 2 S2-053 CVE-2017-12611 RCE 漏洞的简单脚本 用法 root@kitploit: exploit.py 示例 root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" 生成的 EXP:...