https://github.com/1ight-2020/Struts2Scanner

一款Golang编写的Struts2漏洞检测和利用工具，支持并发批量检测
https://github.com/1ight-2020/Struts2Scanner

Last synced: 22 days ago
JSON representation

一款Golang编写的Struts2漏洞检测和利用工具，支持并发批量检测

• Host: GitHub
• URL: https://github.com/1ight-2020/Struts2Scanner
• Owner: 1ight-2020
• Created: 2021-02-11T17:32:13.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2021-06-16T16:16:20.000Z (over 3 years ago)
• Last Synced: 2024-08-05T17:31:33.860Z (4 months ago)
• Language: Go
• Homepage:
• Size: 8.71 MB
• Stars: 52
• Watchers: 2
• Forks: 12
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - 1ight-2020/Struts2Scanner - 一款Golang编写的Struts2漏洞检测和利用工具，支持并发批量检测 (Go)

README

        
# README

## Struts2Scanner

可快速检测struts2漏洞，也可以批量检测。还可以对已检测出漏洞的网站执行shell命令。批量检测时支持并发检测。

## 支持多版本检测

**struts2-005**

**struts2-008**

**struts2-009**

**struts2-013**

**struts2-016**

**struts2-019**

**struts2-devmode**

**struts2-032**

**struts2-033**

**struts2-037**

**struts2-048**

**struts2-052**

**struts2-053**

**struts2-057**

## 参数设置

```bash

-f	导入.txt文件批量检测

-n 	漏洞名称（执行shell）

-u 	测试目标URL

```

## 使用方法

![](./check.png)

![](./shell.png)

![](./f.png)

**检测网站是否存在Struts2漏洞**

```bash

./Struts2Scanner_Mac -u http://192.168.3.64:8080/struts2-showcase/index.action

```

**利用漏洞执行shell**

```bash

./Struts2Scanner_Mac -u http://192.168.3.64:8080/struts2-showcase/index.action -n struts2-045

```

**批量检测漏洞**

```bash

./Struts2Scanner_Mac -f url.txt

```