Tag Archives: Tomcat

Apache Struts CVE-2018-11776 – Testing, Analyzing, & Detection

Posted on by

Intro Any time a new Apache Struts vulnerability comes out it should be taken pretty seriously as there are many “mission critical” systems that are leveraging the framework, with a considerable amount of them being public facing. Unfortunately, as a Continue reading →

Exploiting Apache Struts – CVE-2017-9805

Posted on by

CVE-2017-9805 is yet another very legitimate vulnerability in the Apache Struts framework. In the video, I demonstrate how easy it is to run a simple public python script against a vulnerable remote server, ultimately resulting in a reverse shell back Continue reading →