CVE-2018-11776 PoC — Apache Struts 输入验证错误漏洞

Source

Associated Vulnerability

Readme

# CVE-2018-11776 Docker container and POC exploit written in Go

You can build your own image and run it:

	docker build . -t your_image_name
	docker container run -it --rm -p 8080:8080 your_image_name

Or you just can pull the one I created with love for you:

	docker container run -it --rm -p 8080:8080 tuxotron/cve-2018-11776

Vulnerable application running on port 8080

To try the exploit you will need Go in your system. The systax is:

	exploit-cve-2018-11776 URL COMMAND

For instance, you can run something like:

	go run exploit-cve-2018-11776.go http://localhost:8080 "id"

This should output the *id* command result.

The exploit is a port to Go from the one written in python from this [repository](https://github.com/hook-s3c/CVE-2018-11776-Python-PoC)

Have fun!

File Snapshot

 [4.0K]  /data/pocs/57e77afcbe2b222f033983577e08fed4cfea53d8
├── [ 124]  Dockerfile
├── [1.3K]  exploit-cve-2018-11776.go
├── [ 779]  README.md
└── [ 12M]  ROOT.war

0 directories, 4 files

Remarks