Sploitus

Exploit for cve-2017-5638 CVE-2017-5638

kitploit Β· 2026-08-25

Exploit Code

MARKDOWN26 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-INJCRISTIANROJAS-CVE-2017-5638
# CVE-2017-5638

λ„€, **λ°”λ‘œ κ·Έ** 데이터 브둜컀의 λ³΄μ•ˆ μΉ¨ν•΄ 데λͺ¨ μ•±μž…λ‹ˆλ‹€. μ΅μŠ€ν”Œλ‘œμž‡ μ½”λ“œλ₯Ό ν¬ν•¨ν•˜κ³  μžˆμŠ΅λ‹ˆλ‹€.

# κΈ°λ³Έ μ‚¬μš©λ²• (μ‹€ν–‰)

root@kitploit:~
    
    
    mvn jetty:run
    

그런 λ‹€μŒ http://localhost:8080/basic-struts/index.action으둜 μ΄λ™ν•˜μ„Έμš”. **Welcome to Struts 2!** λ©”μ‹œμ§€κ°€ ν‘œμ‹œλ˜μ–΄μ•Ό ν•©λ‹ˆλ‹€.

# 취약점 μŠ€μΊ”

root@kitploit:~
    
    
    mvn site
    

# κ°μ‚¬μ˜ 말

μ΅μŠ€ν”Œλ‘œμž‡ μ½”λ“œλŠ” immun.io의 μ €μž₯μ†Œμ—μ„œ 가져와 μˆ˜μ •ν–ˆμŠ΅λ‹ˆλ‹€.