08062003

Apache Struts CVE-2017-5638 module fails to detect vulnerability on Struts 2.5.10 instance

7

Description: The apache_struts_vuln module in Nettacker 0.4.0 fails to detect the Apache Struts CVE-2017-5638 Remote Code Execution vulnerability on a known vulnerable Struts 2.5.10 server setup (http://192.168.29.62:8080/struts2-showcase/fileupload/upload.action). Despite confirmed manual...

Nettacker fails running wp_xmlrpc_bruteforce_vuln module on Python 3.11 with database errors and undefined constants

3

Issue Description: Attempting to run the OWASP Nettacker command below on Kali Linux with Python 3.11 encounters fatal errors preventing execution: text python3.11 nettacker.py -i 192.168.29.62 -m wp_xmlrpc_bruteforce_vuln Errors observed...

Nettacker target WordPress site setup fails with HTTP 500 and missing database tables errors

6

Issue Description: I am attempting to run the OWASP Nettacker against a local WordPress installation on Kali Linux (http://localhost/wordpress-vuln/) using the command: text python3.11 nettacker.py -i 192.168.29.62 -m wp_xmlrpc_bruteforce_vuln However,...