Struts02 s2-045 exploit program
CVE-2017-5638
Docker-based security lab demonstrating Apache Struts2 S2-045 (CVE-2017-5638) exploitation and defense, featuring vulnerable and patched applications with WAF protection for hands-on training.
Python-based exploit for Apache Struts CVE-2017-5638 with single URL and batch scanning modes, vulnerability checking, and Nmap reconnaissance integration.
Python proof-of-concept exploit for Apache Struts2 RCE vulnerability CVE-2017-5638, demonstrating remote code execution via crafted Content-Type header.
Proof-of-concept exploit for Apache Struts2 remote code execution vulnerability CVE-2017-5638, enabling unauthenticated attackers to execute arbitrary commands via crafted Content-Type headers.
This is the Apache Struts CVE-2017-5638 struts 2 vulnerability. The same CVE that resulted in the equifax database breach.
Hands-on lab demonstrating Apache Struts2 OGNL injection (CVE-2017-5638) with step-by-step system analysis, exploitation, sandbox bypass, and post-exploitation techniques for penetration testing education.
Interactive command-line shell for exploiting Apache Struts CVE-2017-5638. Automates HTTP/HTTPS exploitation with real-time shell interaction on vulnerable targets.
A exploit for CVE-2017-5638. This exploit works on versions 2.3.5-2.3.31 and 2.5 – 2.5.10
Golang exploit for CVE-2017-5638
Struts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool
Apache Struts2 CVE-2017-5638 (Safe Educational Demo)
Exploitable target to CVE-2017-5638
PoC for CVE: 2017-5638 - Apache Struts2 S2-045
An exploit (and library) for CVE-2017-5638 - Apache Struts2 S2-045 bug.
Docker-based vulnerable environment and Python exploit script demonstrating CVE-2017-5638 (Apache Struts2 RCE) for educational security testing.
Multithreaded vulnerability validator for Apache Struts 2 (CVE-2017-5638) that scans thousands of endpoints via HTTP header injection to detect Struts-Shock without malicious payloads.
This repository provides a PoC for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, exploitable via a crafted Content-Type HTTP header.
(CVE-2017-5638) XworkStruts RCE Vuln test script
Java-based exploit for Apache Struts2 CVE-2017-5638, executing arbitrary commands via crafted HTTP headers. Intended for authorized security assessments.
An exploit for Apache Struts CVE-2017-5638
Struts 2 web app that is vulnerable to CVE-2017-98505 and CVE-2017-5638
An exploit for CVE-2017-5638
Example PHP Exploiter for CVE-2017-5638
Apache Struts 2.0 RCE vulnerability - Allows an attacker to inject OS commands into a web application through the content-type header
Struts2 S2-045（CVE-2017-5638）Vulnerability environment - http://www.mottoin.com/97954.html
Python-based proof-of-concept exploit for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, enabling command injection against vulnerable targets.
CVE: 2017-5638 in different formats
This script is intended to validate Apache Struts 2 vulnerability (CVE-2017-5638), AKA Struts-Shock.
Struts-RCE CVE-2017-5638
An exploit for CVE-2017-5638 Remote Code Execution (RCE) Vulnerability in Apache Struts 2
Automated remote code execution exploit for Apache Struts2 (CVE-2017-5638) with auto-exploitation capabilities for penetration testing and vulnerability verification.
Mass scanner for Apache Struts CVE-2017-5638 remote code execution vulnerability. Automates detection and exploitation of vulnerable Struts endpoints across multiple targets.
Educational analysis of Apache Struts 2 RCE vulnerability CVE-2017-5638, including exploit details, Equifax case study, and prevention measures.
Build the struts-2.3.31 (CVE-2017-5638) environment
Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - Remote Code Execution - Shell Script
Proof of concept of CVE-2017-5638 including the whole setup of the Apache vulnerable server
Proof-of-concept exploit for Apache Struts vulnerability CVE-2017-5638, with scripts to scan random IPs, check for the vulnerability, and execute commands on unpatched servers.
Struts2 S2-045（CVE-2017-5638）Exp with GUI
CVE-2017-5638 Exploit Rewritten In Python By haxerr9
st2-046-poc CVE-2017-5638
Exploit tool for Apache Struts CVE-2017-5638, using OGNL injection to gain remote access to vulnerable servers via command-line interface.
Exploit created by: R4v3nBl4ck end Pacman
Exploit script targeting 5 Apache Struts RCE vulnerabilities (CVE-2013-2251, CVE-2017-5638, CVE-2017-9805, CVE-2018-11776, CVE-2019-0230) with PHP shell payload generation.
Example PoC Code for CVE-2017-5638 | Apache Struts Exploit
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
Tweaking original PoC (https://github.com/rapid7/metasploit-framework/issues/8064) to work on self-signed certificates
Python3 exploit for Apache Struts2 remote code execution vulnerability CVE-2017-5638, enabling command execution on vulnerable servers.
Proof-of-concept exploit for Apache Struts2 remote code execution vulnerability CVE-2017-5638, demonstrating exploitation via crafted Content-Type header.
Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
Docker-based test environment for CVE-2017-5638 (Apache Struts2 remote code execution) with WAR deployment for vulnerability validation and exploitation practice.
Apache Struts CVE-2017-5638 RCE exploitation
Exploit for Apache Struts2 remote code execution vulnerability (CVE-2017-5638) via Content-Type header manipulation.
Demo application and exploit for Apache Struts2 CVE-2017-5638, providing a sample vulnerable app and reference exploit for security testing and education.
Demo app of THAT data broker's security breach
Check for Struts Vulnerability CVE-2017-5638
Proof-of-concept exploit for Apache Struts2 S2-045 (CVE-2017-5638) remote code execution vulnerability via malicious Content-Type header.
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
S2-046|S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
A hands-on simulation of CVE-2017-5638 (Apache Struts2 RCE), showcasing exploit reproduction, OS-level command execution, and mitigations such as input sanitization and endpoint monitoring. Built in Python/Flask with Jupyter notebook demos
A php based exploiter for CVE-2017-5638.
Python-based exploit for Apache Struts2 remote code execution vulnerability CVE-2017-5638, enabling targeted security testing and validation of affected systems.
this exemple of application permet to test the vunerability CVE_2017-5638
Exploit for CVE-2017-5638, a remote code execution vulnerability in Apache Struts2. Provides payload generation and delivery for penetration testing of Struts2-based web applications.
This project demonstrates a Web Application Firewall (WAF) simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits the Apache Struts 2 vulnerability (CVE-2017-5638).
Struts2 RCE CVE-2017-5638 CLI shell
These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)
Struts2 Application Vulnerable to CVE-2017-5638. Explains how the exploit of the vulnerability works in relation to OGNL and the JakartaMultiPart parser.
test struts2 vulnerability CVE-2017-5638 in Mac OS X
Exploitable target to CVE-2017-5638
A practical lab demonstrating the exploitation of a critical Remote Code Execution (RCE) vulnerability in Apache Struts2 (CVE-2017-5638) using Vulhub Docker environments. Includes setup instructions and commands to run the vulnerable container.
Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability
Exploit for Apache Struts2 remote code execution vulnerability (CVE-2017-5638) with Google Dork reconnaissance for target discovery.
Vex Woo · linux · Mar 7, 2017
Metasploit · multiple · Mar 15, 2017
