Struts2-Scan icon indicating copy to clipboard operation
Struts2-Scan copied to clipboard

目标网站存在漏洞,但工具提示 暂不支持S2_016漏洞利用,去掉if name not in s2_list的not才能使用

Open shadow1ng opened this issue 6 years ago • 3 comments

image

shadow1ng avatar Nov 19 '19 07:11 shadow1ng

作者将s2_list作为保存类实例的一个列表,在做字符串检查的时候通不过。 我直接检查条件改为s2_dict....

finsos avatar Jan 08 '20 08:01 finsos

添加s2_dict2为: s2_list = ["S2_001", "S2_003", "S2_005", "S2_007", "S2_008", "S2_009", "S2_012", "S2_013", "S2_015", "S2_016", "S2_019", "S2_029", "S2_032", "S2_033", "S2_037", "S2_045", "S2_046", "S2_048", "S2_053", "S2_devMode", "S2_057"] if name not in s2_dict改成if name not in s2_dict2

ghost avatar Apr 20 '20 11:04 ghost

@Cturbo 你的意思应该是,添加一个新列表,列表元素用字符串(双引号括起来),然后判断条件改为判断这个新的字符串列表,对吧?

s2_list2 = ["S2_001", "S2_003", "S2_005", "S2_007", "S2_008", "S2_009", "S2_012", "S2_013", "S2_015", "S2_016", "S2_019", "S2_029", "S2_032", "S2_033", "S2_037", "S2_045", "S2_046", "S2_048", "S2_053", "S2_devMode", "S2_057"]

if name not in s2_list2:

我这样修改后成功运行。这样描述,小白好理解一点。

huge67 avatar Aug 02 '20 04:08 huge67