Sploitus

Exploit for Immunity Canvas: STRUTS2_DMI_RCE

CVE-2016-3081

canvas · 2016-04-26

Exploit Code

MARKDOWN28 lines
## https://sploitus.com/exploit?id=STRUTS2_DMI_RCE
**Name**|  struts2_dmi_rce  
---|---  
**CVE**|  CVE-2016-3081  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| struts2_dmi_rce  
**Notes**| CVE Name: CVE-2016-3081  
VENDOR: Apache  
NOTES:   
The JAR Server will listen on the port provided in the UI. However, if that port is unavailable,  
a random one will be chosen.  
  
Example vulnerable application: struts2-showcase in Struts 2.3.20.1 (with Dynamic Method Invocation enabled)  
Example URL: http://172.16.196.137:8080/struts2-showcase/showcase.action  
  
Versions tested:  
  
&gt; Ubuntu Linux 14.04.1  
Java 1.8.0.151/Tomcat 7.0.82/Struts 2.3.20.1  
Java 1.8.0.151/Tomcat 7.0.82/Struts 2.3.24.1  
Java 1.8.0.151/Tomcat 8.0.48/Struts 2.3.20.1  
Java 1.8.0.151/Tomcat 8.0.48/Struts 2.3.24.1  
Java 1.7.0.151/Tomcat 8.0.48/Struts 2.3.20.1  
Java 1.7.0.151/Tomcat 8.0.48/Struts 2.3.24.1  
  
Repeatability: Infinite  
References: https://cwiki.apache.org/confluence/display/WW/S2-032  
CVE Url: https://vulners.com/cve/CVE-2016-3081