CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...

S2-045

S2-045 Entorno de vulnerabilidad Struts2 S2-045...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

CVE-2017-5638

CVE-2017-5638 | Struts s2-045 Description It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to display an error message to a user. Affected versions Struts 2.3.5 Struts 2.3.31 Struts 2.5 Stru...

S2-Reaper

S2-Reaper This project is used to collect vulnerable URLs that affected by Struts2 S2-045 from the Google search results. Usage root@kitploit: python reaper.py About The reaper.py will run a google search crawler with keywords definded at crawler.conf to find vulnerable URLs. crawler.conf baseurl...

Struts2Shell

Struts2Shell 针对 CVE-2017-5638 的漏洞利用（及库） - Apache Struts2 S2-045 漏洞。 安装 root@kitploit: $ npm install -g struts2shell 作为库安装 root@kitploit: $ npm install struts2shell 命令行选项 root@kitploit: -h, --help 输出使用信息 -V, --version 输出版本号 -u, --url target 要攻击的 URL -c, --cmd command 要执行的命令 作为库使用 root@kitploit: va...

Struts2-045-Exp

Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...

vulhub-struts2

Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Overview This project demonstrates the Remote Code Execution RCE vulnerability in Apache Struts2 CVE-2017-5638. Attackers can exploit a crafted HTTP Content-Type header to execute arbitrary system commands on vulnerable servers. This repo uses Vulhub Dock...

struts2-tool

Struts2 漏洞检测与利用工具 s2tool 一个纯 Java 实现的 Struts2 S2-045 / S2-046（CVE-2017-5638）漏洞检测与利用工具。 检测模块覆盖 S2-045 / S2-046 两个漏洞， 利用模块提供命令执行、文件管理、信息获取、交互式 Shell、反弹 Shell、Webshell 上传等能力。 免责声明 ：本工具仅用于授权的安全测试、漏洞研究与教学目的。 严禁用于未授权的非法用途，使用者需自行承担一切法律责任。 功能总览...

CVE-2017-5638

LAB 1 — Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045 I. SYSTEM ANALYSIS Attack Surface Analysis After starting the container, Struts2 logs show that the application loads familiar configuration files such as struts-default.xml , struts-plugin.xml , and struts.xml. This confirms that the...

CVE-2017-5638-Attack-and-Defense

Laboratorio de Defensa y Explotación de Apache Struts2 S2-045 Un laboratorio de seguridad basado en Docker que demuestra tanto explotación como defensa contra la vulnerabilidad Apache Struts2 S2-045 CVE-2017-5638. Este laboratorio incluye: 1. Aplicación vulnerable : Struts 2.3.31 vulnerable a...

S2-046_S2-045_POC

S2-046POC Usage: root@kitploit: ./s2046.sh url ./s2045.sh url Sample: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action OUTPUT: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...

CVE-2017-5638

CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts2 Vulnerability Detection and Exploitation Tool s2tool...

Apache Struts 2.3.5 < 2.3.32 / 2.5.x < 2.5.10.1 Remote Code Execution (S2-045 / S2-046)

The Jakarta Multipart parser in Apache Struts 2 2.3.5 to 2.3.31 and 2.5.x to 2.5.10 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or...

S2-057 vulnerability in the original author's README: how to use automated tools find 5 RCE-vulnerability warning-the black bar safety net

! 2018 4 months, I to Apache Struts and the Struts security team reported a new remote code execution vulnerability--CVE-2018-11776（S2-057 in to do some configuration on a server running Struts, and can be accessed via the carefully constructed URL to trigger the vulnerability. This discovery is ...

Shenzhen Cloud Box Technology Co., Ltd. cloud platform exists s2-045 command execution vulnerability

Cloudbox is a private cloud storage platform for enterprise document aggregation, distribution monitoring and collaboration based on mobile networks. Shenzhen Cloud Box Technology Co., Ltd. cloud platform using Apache as the framework, the framework exists s2-045 command execution vulnerability...

Atlassian Bamboo suffers from s2-045 remote code execution vulnerability

Atlassian Bamboo is a set of continuous integration build tools. Atlassian Bamboo uses Apache middleware as the framework, the framework exists S2-045 remote command execution vulnerability, allowing an attacker to exploit the vulnerability to remotely execute commands, obtain server privileges,...

RAP interface management system suffers from s2-045 remote command execution vulnerability

RAP interface management system is a GUI tool to help WEB engineers more efficient management of interface documents . The RAP Interface Management System suffers from a s2-045 remote command execution vulnerability. The vulnerability allows an attacker to remotely execute commands to gain server...

Hikvision Centralized Surveillance Application Management System Has S2-045 Remote Command Execution Vulnerability

Hikvision is a video-centric IoT solution and data operation service provider. Hikvision's centralized surveillance application management system uses Apache middleware as the framework, which suffers from S2-045 remote command execution vulnerability, allowing attackers to exploit the...