Apache Struts 2 Namespace Redirect OGNL Injection
Title source: metasploitExploitation Summary
CVE-2018-11776 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021, with confirmed use in ransomware campaigns.
EIP tracks 26 public exploits from researchers including Metasploit, Mazin Ahmed, hook-s3c, including a Metasploit module exploits/multi/http/struts2_namespace_ognl.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits CVE-2018-11776, a remote code execution vulnerability in Apache Struts 2.3-2.3.4 and 2.5-2.5.16 via OGNL injection in redirect actions. It supports automatic detection of target configuration and payload delivery for Unix, Linux, and Windows systems.
Description
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.
Exploits (26)
This Metasploit module exploits CVE-2018-11776, a remote code execution vulnerability in Apache Struts 2.3-2.3.4 and 2.5-2.5.16 via OGNL injection in redirect actions. It supports automatic detection of target configuration and payload delivery for Unix, Linux, and Windows systems.
This Python script exploits CVE-2018-11776, a remote code execution vulnerability in Apache Struts2. It checks for vulnerability by injecting OGNL expressions and executes arbitrary commands if the target is vulnerable.
This exploit leverages CVE-2018-11776, a remote code execution vulnerability in Apache Struts2. It constructs an OGNL payload to execute arbitrary commands on the target system via a crafted URL, exploiting improper input validation in the Struts2 framework.
This repository provides a technical writeup and references for CVE-2018-11776, a remote code execution vulnerability in Apache Struts. It includes links to external PoC repositories and detailed analysis from Semmle QL.
This repository contains a Python-based exploit for CVE-2018-11776, a remote code execution vulnerability in Apache Struts2. The exploit checks for vulnerability and executes arbitrary commands via OGNL injection.
This repository contains a working Python PoC for CVE-2018-11776, an Apache Struts2 RCE vulnerability. It includes scripts to test vulnerability and execute commands, including reverse shells, via OGNL injection in URL paths.
This repository contains a Python-based PoC exploit for CVE-2018-11776, targeting Apache Struts 2. It leverages Shodan for mass exploitation, verifies vulnerability before execution, and includes an OGNL payload for remote command execution.
This repository contains a functional proof-of-concept exploit for CVE-2018-11776, targeting Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16. It includes a payload generator for remote code execution and integrates with the Shodan API for target discovery.
This repository contains a functional exploit for CVE-2018-11776, an Apache Struts2 RCE vulnerability. The exploit leverages OGNL injection to execute arbitrary commands on vulnerable systems.
This is a functional exploit for CVE-2018-11776, a remote code execution vulnerability in Apache Struts. It leverages OGNL injection to execute arbitrary commands on the target system.
This repository provides a detailed writeup and setup instructions for exploiting CVE-2018-11776, a remote code execution vulnerability in Apache Struts2. It includes steps to configure a vulnerable environment and demonstrates the exploit using an OGNL expression.
This repository provides a technical writeup and references for CVE-2018-11776, a remote code execution vulnerability in Apache Struts. It includes links to external PoC repositories and detailed analysis from Semmle QL.
This repository provides a vulnerable Docker container and PoC exploits for CVE-2018-11776, a Struts2 RCE vulnerability. It includes OGNL injection payloads to execute arbitrary commands and create files on the target system.
This repository contains a Python script that checks for the presence of CVE-2018-11776, a remote code execution vulnerability in Apache Struts2. The script sends crafted HTTP requests to detect the vulnerability by checking for specific responses.
This repository contains a working exploit for CVE-2018-11776, a remote code execution vulnerability in Apache Struts2. The exploit uses an OGNL payload to execute arbitrary commands on the target system.
This repository provides a detailed technical analysis of CVE-2018-11776, including environment setup, PoC execution steps, root cause analysis, and mitigation strategies. It includes OGNL injection payloads and demonstrates RCE via curl commands.
This is a Go-based exploit for CVE-2018-11776, targeting Apache Struts2. It leverages OGNL injection to execute arbitrary commands on the server, demonstrating remote code execution (RCE).
This repository is a stub for Cved, a tool to manage vulnerable Docker containers, referencing CVE-2018-11776. It does not contain exploit code but links to external sources for vulnerable images.
This repository contains a functional exploit for CVE-2018-11776, an Apache Struts2 RCE vulnerability. The exploit leverages OGNL injection to execute arbitrary commands on vulnerable Struts2 instances.
This repository contains a functional PoC for CVE-2018-11776, an Apache Struts2 RCE vulnerability. It uses OGNL injection to disable security restrictions and execute a reverse shell via a crafted HTTP request.
This is a functional exploit for CVE-2018-11776, leveraging an OGNL injection vulnerability in Apache Struts 2 to achieve remote command execution. The payload manipulates the OGNL context to bypass security restrictions and execute arbitrary commands.
This repository provides a CloudFormation template to deploy an isolated test environment for CVE-2018-11776, an Apache Struts RCE vulnerability. It includes steps to verify vulnerability, execute an exploit, and establish a reverse shell.
This repository contains a Python-based exploit for CVE-2018-11776, an RCE vulnerability in Apache Struts2. The exploit leverages OGNL injection to execute arbitrary commands on vulnerable systems.
This repository provides a writeup and detection methods for CVE-2018-11776, a vulnerability in Apache Struts that allows remote code execution. It includes Suricata rules and a kernel module for detecting and blocking malicious traffic.
This repository contains a functional Python exploit for CVE-2018-11776, a remote code execution vulnerability in Apache Struts. The exploit leverages OGNL injection to execute arbitrary commands on the target system.
This Metasploit module exploits CVE-2018-11776, a remote code execution vulnerability in Apache Struts 2.3-2.3.4 and 2.5-2.5.16 via OGNL injection in redirect actions. It supports automatic detection, payload delivery, and handles various target platforms.
Nuclei Templates (1)
http.html:"apache struts" || http.title:"struts2 showcase" || http.html:"struts problem report"
body="struts problem report" || title="struts2 showcase" || body="apache struts"
References (20)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H