Add PoC exploit for CVE-2020-17530 - Githubissues

ronin-rb / community-pocs

A repository of PoCs for ronin-exploits

https://ronin-rb.dev

GNU General Public License v3.0

0 stars 2 forks source link

Add PoC exploit for CVE-2020-17530 #23

Open postmodern opened 5 months ago

postmodern commented 5 months ago

Add a PoC exploit for CVE-2020-17530, a remote command execution in Apache Struts 2.0.0 - 2.5.25.

Reference PoCs

https://gitee.com/delete_user/CVE-2020-17530/blob/main/s2-061.py (simple HTTP POST)
https://github.com/CyborgSecurity/CVE-2020-17530/blob/master/CVE-2020-17530.py#L8 (builds the HTTP POST form data as a giant string with the command embedded in it)
https://github.com/ludy-dev/freemarker_RCE_struts2_s2-061/blob/main/freemarker_RCE_struts2_s2-061.py#L7

Vuln App

https://github.com/vulhub/vulhub/tree/639e32be6c0425b11d7d56594761c5e599a6a9d5/struts2/s2-061

How to Submit a PoC

See the CONTRIBUTING file for instructions on how to submit a PoC exploit.