CVE-2020-17530 PoC — Apache Struts 代码注入漏洞

Source

https://github.com/keyuan15/CVE-2020-17530

Associated Vulnerability

Title:Apache Struts 代码注入漏洞 (CVE-2020-17530)
Description:Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Description

Struts2 S2-061 远程命令执行漏洞（CVE-2020-17530）

Readme

# CVE-2020-17530
Struts2 S2-061 远程命令执行漏洞（CVE-2020-17530）

# 使用说明：
        python CVE-2020-17530.py -u url
        python CVE-2020-17530.py -f file.txt
        python CVE-2020-17530.py -f file.txt -o out_file.txt
        python CVE-2020-17530.py -f file.txt -p socks5://127.0.0.1:7890
        python CVE-2020-17530.py -e url


Struts2 S2-061 远程命令执行漏洞（CVE-2020-17530）

optional arguments:
  -h, --help            show this help message and exit
  -u URL, --url URL     指定webshell地址
  -f FILE, --file FILE  指定文件
  -p PROXY, --proxy PROXY
                        设置代理，如socks5://127.0.0.1:7890
  -o OUTPUT, --output OUTPUT
                        将结果输出到文件
  -e EXPLOIT, --exploit EXPLOIT
                        漏洞利用

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!