Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Strutter — Proof of Concept for CVE-2018-11776 | Kitploit

GitHub/ekultek/strutter

OSINT (Open Source Intelligence)Reconnaissance Vulnerability Analysis Exploitation Web Application Exploitation

ekultek/strutter

Strutter

Proof of Concept for CVE-2018-11776

View Repository

21517 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

Strutter

Proof of Concept for CVE-2018-11776, comes complete with the ability to search Shodan API for targets

CVE-2018-11776

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper action(s) have no or wildcard namespace. Same possibility when using url tag which doesn't have value and action set and in same time, its upper action(s) have no or wildcard namespace.