CVE-2020-17530 PoC — Apache Struts 代码注入漏洞

Source

https://github.com/fatkz/CVE-2020-17530

Associated Vulnerability

Title: Apache Struts 代码注入漏洞 (CVE-2020-17530)
Description:Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Readme

# OGNL Injection Exploit

## Summary
Simple Python script to exploit OGNL injection vulnerabilities in Apache Struts2/Tomcat and execute system commands.

## Usage

```bash
pip install requests colorama
python3 exploit.py -u http://target/index.action -c "id"

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →