Sploitus

Exploit for struts-pwn

CVE-2017-5638

kitploit · 2026-08-26

Exploit Code

MARKDOWN20 lines
## https://sploitus.com/exploit?id=KITPLOIT:1841841790447853746
# _struts-pwn_

### An exploit for Apache Struts CVE-2017-5638

# **Usage**

## Testing a single URL.

`python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id'`

## Testing a list of URLs.

`python struts-pwn.py --list 'urls.txt' -c 'id'`

## Checking if the vulnerability exists against a single URL.

`python struts-pwn.py --check --url 'http://example.com/struts2-showcase/index.action'`

## Checking if the vulnerability exists against a list of URLs.