struts-rce

:source-highlighter: pygments

= Apache Struts CVE-2017-5638 exploitation

This simple web application is built with vulnerable Apache Struts 2.5.10 (CVE-2017-5638). It's vulnerable to RCE.

== Starting web application

To start vulnerable web application, execute:

mvn jetty:run

The application will be accessible on port 8012 by default. You can change it:

mvn -Djetty.http.port= jetty:run

== Accessing web application

To access the vulnerable web application, open the following link in your browser: http://127.0.0.1:8012/struts-rce. If you changed the default port, modify the link accordingly.

== Exploiting web application

The vulnerability can be exploited to run arbitrary command on server side (RCE). The payload is included in HTTP header. The following payload will execute the command: [source,http]