Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-11776 — CVE-2018-11776(S2-057) EXPLOIT CODE | Kitploit
Tools/GitHubGitHub/jiguangsdf/cve-2018-11776
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubjiguangsdf/cve-2018-11776

CVE-2018-11776

CVE-2018-11776(S2-057) EXPLOIT CODE

View Repository
1052 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

CVE-2018-11776

On August 23, 2018, Apache Struts 2 released its latest security advisory, revealing a high-risk remote code execution vulnerability. Reported by a security researcher from the Semmle Security Research team, this vulnerability is tracked as CVE-2018-11776 (S2-057). If the namespace value is not set in the Struts 2 XML configuration, and the Action Configuration does not set a namespace or uses a wildcard namespace, it may lead to remote code execution.

Affected Versions

Struts 2.3 to 2.3.34

Struts 2.5 to 2.5.16

Fixed Versions

Struts 2.3.35

Struts 2.5.17

Usage

python3 s2-057.py {url} eg: python3 s2-057.py http://example.com

Vulnerability Verification

The seebug.org online detection platform found a site vulnerable to Struts S2-057.

default

The s2-057.py script detected a site vulnerable to Struts S2-057.

default
Download Tool