tshethp/java-struts2-cve-2018-11776 repository overview

[This image and document is for educational purpose only. DO NOT USE THIS IMAGE IN PRODUCTION]

This image consists 2 remote code execution vulnerability discovered on August 2018 CVE-2018-11776. This vulnerability allows attacker to execute remote command using OGNL encapsulated payload in exploit. This vulnerability exists in Struts 2.3 to 2.3.24 and 2.5 to 2.5.16 version.

Container also consists old Java struts vulnerability discovered in 2017 that was responsible for Equifax data breach last year.

Container can be deployed with following command.

⁠docker run -d -p 8080:8080 tshethp/java-struts2-cve-2018-11776

Following is the way to exploit the same.

1. Download the exploit python file from [Link is removed for the security reasons]
2. execute exploit on the server with host name and command as parameter

NOTE: Exploit requires python 2.7 configured on attacker system