Sploitus

Apache Struts v3 - Tool To Exploit 3 RCE Vulnerabilities On ApacheStruts

CVE-2013-2251CVE-2017-5638CVE-2018-11776

kitploit · 2018-08-26

Exploit Code

MARKDOWN19 lines
## https://sploitus.com/exploit?id=KITPLOIT:4611207874033525364
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_cUkxvZICNWHNlXXJmreluEMAH4c7MAyDIaSJ41qsNxz3Xe_HQ6b3GC3UoP8_zbKcj6R487yox2LVIAjuJLW8NFfTNhtUEm9yvxBzEemiP0lZc5V1ncx9wc7vU7eG9A5sIFHyYgqEcP91/s640/Apache-Struts-v3_1_screen.png)

  
Script contains the fusion of 3 RCE vulnerabilities on ApacheStruts, it also has the ability to create server shells.  
  
**SHELL**  
**php** `finished`  
**jsp** `process`  
  
**CVE ADD**  
**CVE-2013-2251** `'action:', 'redirect:' and 'redirectAction'`  
**CVE-2017-5638** `Content-Type`  
**CVE-2018-11776** `'redirect:' and 'redirectAction'`  
  
  


**Download Apache-Struts-v3**