Open postmodern opened 3 months ago
Add a PoC exploit for CVE-2017-9805, remove code execution via insecure deserialization in the REST plugin for Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13.
/bin/sh -c
See the CONTRIBUTING file for instructions on how to submit a PoC exploit.
Ronin::Support::Network::HTTP needs to support multipart file upload to make it easier to write this PoC. https://github.com/ronin-rb/ronin-support/issues/504
Ronin::Support::Network::HTTP
Add a PoC exploit for CVE-2017-9805, remove code execution via insecure deserialization in the REST plugin for Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13.
Reference PoCs
/bin/sh -c
)Vuln App
How to Submit a PoC
See the CONTRIBUTING file for instructions on how to submit a PoC exploit.