CVE-2020-17530 PoC — Apache Struts 代码注入漏洞

Source

https://github.com/ludy-dev/freemarker_RCE_struts2_s2-061

Associated Vulnerability

Title: Apache Struts 代码注入漏洞 (CVE-2020-17530)
Description:Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Description

(cve-2020-17530) struts2_s2-061 freemarker_RCE testscript

Readme

# freemarker_RCE_struts2_s2-061
(cve-2020-17530) struts2_s2-061 freemarker_RCE testscript

python freemarker_RCE_struts2_s2-061.py <dst_ip> <command> <-s ; optional - TLS>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →