CVE-2020-17530 PoC — Apache Struts 代码注入漏洞

Source

https://github.com/killmonday/CVE-2020-17530-s2-061

Associated Vulnerability

Title: Apache Struts 代码注入漏洞 (CVE-2020-17530)
Description:Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Readme

# CVE-2020-17530-s2-061
> s2-061图形化界面的exp，only for fun and practice



# 使用

```
python CVE-2020-17530.py
```

- 填入目标地址

- 填入欲执行的系统命令

- 点击执行

![Image text](images/usage.png)

  PS：exp中内置了反弹shell函数，但懒得在GUI上添加相应的按钮和配置项，点到为止

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →