Struts2-Scan icon indicating copy to clipboard operation
Struts2-Scan copied to clipboard

Struts2全漏洞扫描利用工具

Results 30 Struts2-Scan issues
Sort by recently updated
recently updated
newest added

新增dockerfile文件

![image](https://user-images.githubusercontent.com/53250016/121624004-4f122000-caa3-11eb-8694-01967ecc7f1e.png)

[ERROR] http://x.x.x.x/ 访问出错: HTTPConnectionPool(host='x.x.x.x', port=80): Read timed out. (read timeout=10) 总是报这个错误

建议检测前时规范下url格式,缺少前面的"http://"和后面的"/"就会报错。 我在scan_one函数下插入了下面这个 > if "://" not in url: > url = "http://" + url.strip() > url = url.rstrip("/") + "/"

https://github.com/HatBoy/Struts2-Scan/blob/0c00054478cabf6128013497c119d6d008d79c79/Struts2Scan.py#L1498

测试了几个地址,也docker了漏洞环境,而且用了两台电脑,都是报的这个错,有大佬告诉我怎么解决吗? [ERROR] http://192.168.10.198/orders/4/deleteConfirm 访问出错: ('Connection broken: IncompleteRead(0 bytes read)', IncompleteRead(0 bytes read))

![image](https://user-images.githubusercontent.com/39651966/69126769-e68bd880-0ae3-11ea-8471-f59e69e89569.png)

https://github.com/HatBoy/Struts2-Scan/blob/0c00054478cabf6128013497c119d6d008d79c79/Struts2Scan.py#L1389

[ERROR] 暂不支持S2_045漏洞利用