CVE-2017-5638 PoC — Apache Struts 2 输入验证错误漏洞

Description

Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)

介绍

# strutszeiro
Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)

#Dependencies
pip install -r requeriments.txt

#Config
<pre>
Create a telegram bot, save the API token in config/token.conf
Create a telegram group, save the group id in config/group.conf
</pre>

#Start
python strutszeiro.py

#Telegram Usage
<pre>
/add url - test vulnerability and add the new server
/exploit url *cmd - execute commands in a specific server (you need to use the * caracter)
/botnet cmd - execute commands in all servers
/total - show total of servers in botnet
</pre>

Thanks to <a href="https://twitter.com/BrenoTamburi" target="_blank">@btamburi</a>

文件快照

备注