Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2017-9805 — CVE-2017-9805: Apache Struts 2 S2-052 RCE Exploit - PoC for Harvard University (OTD) | Kitploit
Tools/GitHubGitHub/fl5xia/cve-2017-9805
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubfl5xia/cve-2017-9805

CVE-2017-9805

CVE-2017-9805: Apache Struts 2 S2-052 RCE Exploit - PoC for Harvard University (OTD)

View Repository
69 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2017-9805: Apache Struts 2 S2-052 RCE Analysis

This repository contains technical details and a PoC (Proof of Concept) study regarding the XStream deserialization vulnerability in Apache Struts 2 (S2-052).

📌 Vulnerability Information

  • CVE Code: CVE-2017-9805
  • Vulnerability Type: Remote Code Execution (RCE)
  • Risk Level: CRITICAL (9.8/10)
  • Target Analysis: Harvard University - OTD (http://otd.harvard.edu/contact-us/)

🔍 Technical Summary

This vulnerability arises from Apache Struts REST plugin's insecure use of the XStream library while processing XML data. Attackers can execute commands with full privileges on the server by sending a specially crafted XML request.

⚠️ Legal Disclaimer

This content is for educational and ethical hacking purposes only. Using it on systems without permission may result in legal liability. All responsibility belongs to the user.

📄 License

This project is protected under the MIT license.

CVE-2017-9805: Apache Struts 2 S2-052 RCE Analysis

This repository contains technical details and a Proof of Concept (PoC) for the XStream deserialization vulnerability in Apache Struts 2 (S2-052).

📌 Vulnerability Details

  • CVE ID: CVE-2017-9805
  • Vulnerability Type: Remote Code Execution (RCE)
  • Risk Level: CRITICAL (9.8/10)
  • Case Study: Harvard University - OTD (http://otd.harvard.edu/contact-us/)

🔍 Technical Overview

This vulnerability arises from the unsafe use of the XStream library within the Apache Struts REST plugin when processing XML data. An attacker can execute arbitrary commands on the server by sending a specially crafted XML request.

⚠️ Disclaimer

This content is for educational and ethical hacking purposes only. Unauthorized use on systems without prior consent is illegal. The user assumes all responsibility for their actions.

📄 License

This project is licensed under the MIT License.

Download Tool