Ubuntu 14.04.3 struts2漏洞環境
0x01 安裝tomcat
wget http://apache.fayea.com/tomcat/tomcat-8/v8.5.11/bin/apache-tomcat-8.5.11.tar.gz
tar xzvf apache-tomcat-8.5.11.tar.gz
./startup.sh
0x02下載struts
http://apache.uberglobalmirror.com/struts/2.5.10/struts-2.5.10-apps.zip
解壓zip
例如：
拷貝struts-2.3.31-all\struts-2.3.31\apps 下war包到/root/apache-tomcat-8.5.11/webapps
struts2-16
http://10.160.11.192:8080/struts2-16/example/HelloWorld.action
struts2-20
http://10.160.11.192:8080/struts2-20/example/HelloWorld.action
struts2-45 struts2-core-2.5.jar
http://10.160.11.192:8080/struts2-5-showcase/index.action
struts2-core-2.5.10
http://10.160.11.192:8080/struts2-showcase/index.action
查看struts2版本信息/apache-tomcat-8.5.11/webapps/struts2-showcase/WEB-INF/lib
