Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2017-5638-PoC — This repository provides a PoC for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, exploitable via a crafted Content-Type HTTP header. | Kitploit
Tools/GitHubGitHub/kloutkake/cve-2017-5638-poc
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubkloutkake/cve-2017-5638-poc

CVE-2017-5638-PoC

This repository provides a PoC for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, exploitable via a crafted Content-Type HTTP header.

View Repository
141 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept

This repository contains a Proof of Concept (PoC) script demonstrating the Remote Code Execution (RCE) vulnerability identified as CVE-2017-5638 in Apache Struts 2.

Vulnerability Details

  • CVE ID: CVE-2017-5638
  • Affected Software: Apache Struts 2 versions prior to 2.3.32 and 2.5.10.1
  • Vulnerability Type: Remote Code Execution
  • Attack Vector: Remote, via crafted Content-Type HTTP header

Description

An error in the handling of the Content-Type header in file upload requests allows attackers to execute arbitrary OGNL expressions. This can lead to full system compromise.

Contents

  • exploit.py: PoC script to demonstrate the vulnerability
  • README.md: Instructions on setting up a vulnerable environment and running the PoC
  • docs/: Additional documentation and analysis of the vulnerability

    • Usage

    • Install requirements:
    root@kitploit:~
    pip isntall -r PoC/requirements.txt
    • Check if a Target is Vulnerable:
    root@kitploit:~
    python3 PoC/exploit.py --url <target_url> --check
    • Run exploit:
    root@kitploit:~
    python3 PoC/exploit.py --url <target_url> --cmd <command_to_execute>

    Disclaimer

    This project is for educational purposes only. Unauthorized use of this code against any system without permission is illegal and unethical.

    Download Tool