Alexandru Dracea

Apache Struts S2-20 classLoader manipulation improvement

1

J2EEScan scans for Struts class loader manipulation ( [https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/ApacheStrutsS2020.java](url) ) with the type of payload engineered AFTER the first fix which is Class.classLoader Ex: Class.classLoader.URLs[0]=testClassloaderManipulation1509723031 During testing I've seen that...