Shulou(Shulou.com)05/31 Report--

This article introduces how to carry out Struts2 S2-059 CVE-2019-0230 vulnerability verification, the content is very detailed, interested friends can refer to, hope to be helpful to you.

1. Environment building

Struts-2.3.37+apache-tomcat-8.5.34

PS: vulnerability scope: Apache Struts 2.0.0-2.5.20

two。 Verification process 2.1.Take the official Struts code as an example and modify it slightly.

2.2 the result is shown in the figure

Pass in plain text:

The ognl expression% {9x9} is passed, and url transcoding is required:

Here with

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.