Apache-Struts-0Day-Exploit

kitploit · 2026-08-27

Description

Critical RCE in Apache Struts (CVE-2018-11776) enables remote code execution via 0-day exploit.

Entry point

ParameterACTION · path

Path/${ognl}/showcase.action

OGNL injection via Struts2 Namespace Redirect vulnerability allowing remote code execution.

Affected Apache Struts versions

Apache Struts< 2.3.35, 2.5.17

All known vulnerabilities by product

CVSS 9.3 for CVE-2018-11776

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

References

https://github.com/LightC0der/Apache-Struts-0Day-Exploit/

Exploit Details

Modified:2026-08-27 03:09

Last Seen:2026-08-27 20:07

Reporter:KitPloit

Tags

Apache StrutsRemote Code ExecutionCVE-2018-11776Zero-Day ExploitPython Exploit Tool

Other exploits for CVE-2018-11776

apche-struts-vuln-demo-cve-2018-11776

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

S2-057-CVE-2018-11776

2026-08-28 KitPloitKITPLOIT

cve-2018-11776-docker

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN18 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ARLYONE-APACHE-STRUTS-0DAY-EXPLOIT
# Apache-Struts-0Day-Exploit

Критическая уязвимость удаленного выполнения кода (CVE-2018-11776) обнаружена в Apache Struts.

# Установка

git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/

# Использование:

python Apache_Struts.py

URL : www.example.com/

Shell : "Команды" например ls, dir, whoami

![Buy Me A Coffee](https://assets.kitploit.com/production/public/readmes/22819/485b634752d0d832ed936de61544bf16e5e54dc05146ccca080333c15097d455.png)