{"exploits":[{"source":"exploitdb","id":"EDB-41570","title":"Apache Struts 2.3.5 \u003c 2.3.31 / 2.5 \u003c 2.5.10 - Remote Code Execution","type":"webapps","platform":"linux","date":"2017-03-07","verified":true,"url":"https://www.exploit-db.com/exploits/41570"},{"source":"pocgithub","id":"Flyteas/Struts2-045-Exp","title":"Flyteas/Struts2-045-Exp","date":"2017-03-07","url":"https://github.com/Flyteas/Struts2-045-Exp"},{"source":"pocgithub","id":"PolarisLab/S2-045","title":"PolarisLab/S2-045","date":"2017-03-07","url":"https://github.com/PolarisLab/S2-045"},{"source":"metasploit","id":"exploit/multi/http/struts2_content_type_ognl","title":"Apache Struts Jakarta Multipart Parser OGNL Injection","type":"exploit","platform":"Linux,Unix,Windows","date":"2017-03-07","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/struts2_content_type_ognl"},{"source":"pocgithub","id":"bongbongco/cve-2017-5638","title":"bongbongco/cve-2017-5638","date":"2017-03-08","url":"https://github.com/bongbongco/cve-2017-5638"},{"source":"pocgithub","id":"jas502n/S2-045-EXP-POC-TOOLS","title":"jas502n/S2-045-EXP-POC-TOOLS","date":"2017-03-09","url":"https://github.com/jas502n/S2-045-EXP-POC-TOOLS"},{"source":"pocgithub","id":"btamburi/strutszeiro","title":"btamburi/strutszeiro","date":"2017-03-10","url":"https://github.com/btamburi/strutszeiro"},{"source":"pocgithub","id":"immunio/apache-struts2-CVE-2017-5638","title":"immunio/apache-struts2-CVE-2017-5638","date":"2017-03-10","url":"https://github.com/immunio/apache-struts2-CVE-2017-5638"},{"source":"pocgithub","id":"xsscx/cve-2017-5638","title":"xsscx/cve-2017-5638","date":"2017-03-10","url":"https://github.com/xsscx/cve-2017-5638"},{"source":"pocgithub","id":"Masahiro-Yamada/OgnlContentTypeRejectorValve","title":"Masahiro-Yamada/OgnlContentTypeRejectorValve","date":"2017-03-11","url":"https://github.com/Masahiro-Yamada/OgnlContentTypeRejectorValve"},{"source":"pocgithub","id":"aljazceru/CVE-2017-5638-Apache-Struts2","title":"aljazceru/CVE-2017-5638-Apache-Struts2","date":"2017-03-11","url":"https://github.com/aljazceru/CVE-2017-5638-Apache-Struts2"},{"source":"pocgithub","id":"initconf/CVE-2017-5638_struts","title":"initconf/CVE-2017-5638_struts","date":"2017-03-11","url":"https://github.com/initconf/CVE-2017-5638_struts"},{"source":"pocgithub","id":"jrrombaldo/CVE-2017-5638","title":"jrrombaldo/CVE-2017-5638","date":"2017-03-11","url":"https://github.com/jrrombaldo/CVE-2017-5638"},{"source":"pocgithub","id":"random-robbie/CVE-2017-5638","title":"random-robbie/CVE-2017-5638","date":"2017-03-11","url":"https://github.com/random-robbie/CVE-2017-5638"},{"source":"pocgithub","id":"sjitech/test_struts2_vulnerability_CVE-2017-5638","title":"sjitech/test_struts2_vulnerability_CVE-2017-5638","date":"2017-03-11","url":"https://github.com/sjitech/test_struts2_vulnerability_CVE-2017-5638"},{"source":"pocgithub","id":"lolwaleet/ExpStruts","title":"lolwaleet/ExpStruts","date":"2017-03-12","url":"https://github.com/lolwaleet/ExpStruts"},{"source":"pocgithub","id":"mazen160/struts-pwn","title":"mazen160/struts-pwn","date":"2017-03-12","url":"https://github.com/mazen160/struts-pwn"},{"source":"pocgithub","id":"ret2jazzy/Struts-Apache-ExploitPack","title":"ret2jazzy/Struts-Apache-ExploitPack","date":"2017-03-12","url":"https://github.com/ret2jazzy/Struts-Apache-ExploitPack"},{"source":"pocgithub","id":"oktavianto/CVE-2017-5638-Apache-Struts2","title":"oktavianto/CVE-2017-5638-Apache-Struts2","date":"2017-03-13","url":"https://github.com/oktavianto/CVE-2017-5638-Apache-Struts2"},{"source":"exploitdb","id":"EDB-41614","title":"Apache Struts 2.3.5 \u003c 2.3.31 / 2.5 \u003c 2.5.10 - 'Jakarta' Multipart Parser OGNL Injection (Metasploit)","type":"remote","platform":"multiple","date":"2017-03-15","verified":true,"url":"https://www.exploit-db.com/exploits/41614"},{"source":"pocgithub","id":"jrrdev/cve-2017-5638","title":"jrrdev/cve-2017-5638","date":"2017-03-15","url":"https://github.com/jrrdev/cve-2017-5638"},{"source":"pocgithub","id":"opt9/Strutshock","title":"opt9/Strutshock","date":"2017-03-16","url":"https://github.com/opt9/Strutshock"},{"source":"pocgithub","id":"falcon-lnhg/StrutsShell","title":"falcon-lnhg/StrutsShell","date":"2017-03-17","url":"https://github.com/falcon-lnhg/StrutsShell"},{"source":"pocgithub","id":"KarzsGHR/S2-046_S2-045_POC","title":"KarzsGHR/S2-046_S2-045_POC","date":"2017-03-21","url":"https://github.com/KarzsGHR/S2-046_S2-045_POC"},{"source":"pocgithub","id":"jas502n/st2-046-poc","title":"jas502n/st2-046-poc","date":"2017-03-21","url":"https://github.com/jas502n/st2-046-poc"},{"source":"pocgithub","id":"gsfish/S2-Reaper","title":"gsfish/S2-Reaper","date":"2017-03-23","url":"https://github.com/gsfish/S2-Reaper"},{"source":"pocgithub","id":"mcassano/cve-2017-5638","title":"mcassano/cve-2017-5638","date":"2017-03-26","url":"https://github.com/mcassano/cve-2017-5638"},{"source":"pocgithub","id":"opt9/Strutscli","title":"opt9/Strutscli","date":"2017-03-28","url":"https://github.com/opt9/Strutscli"},{"source":"pocgithub","id":"tahmed11/strutsy","title":"tahmed11/strutsy","date":"2017-04-09","url":"https://github.com/tahmed11/strutsy"},{"source":"pocgithub","id":"payatu/CVE-2017-5638","title":"payatu/CVE-2017-5638","date":"2017-05-05","url":"https://github.com/payatu/CVE-2017-5638"},{"source":"pocgithub","id":"Aasron/Struts2-045-Exp","title":"Aasron/Struts2-045-Exp","date":"2017-05-27","url":"https://github.com/Aasron/Struts2-045-Exp"},{"source":"pocgithub","id":"SpiderMate/Stutsfi","title":"SpiderMate/Stutsfi","date":"2017-05-28","url":"https://github.com/SpiderMate/Stutsfi"},{"source":"pocgithub","id":"jpacora/Struts2Shell","title":"jpacora/Struts2Shell","date":"2017-05-28","url":"https://github.com/jpacora/Struts2Shell"},{"source":"pocgithub","id":"smancke/CVE-2017-5638","title":"smancke/CVE-2017-5638","date":"2017-06-07","url":"https://github.com/smancke/CVE-2017-5638"},{"source":"pocgithub","id":"homjxi0e/CVE-2017-5638","title":"homjxi0e/CVE-2017-5638","date":"2017-06-08","url":"https://github.com/homjxi0e/CVE-2017-5638"},{"source":"pocgithub","id":"riyazwalikar/struts-rce-cve-2017-5638","title":"riyazwalikar/struts-rce-cve-2017-5638","date":"2017-06-08","url":"https://github.com/riyazwalikar/struts-rce-cve-2017-5638"},{"source":"pocgithub","id":"eeehit/CVE-2017-5638","title":"eeehit/CVE-2017-5638","date":"2017-06-13","url":"https://github.com/eeehit/CVE-2017-5638"},{"source":"pocgithub","id":"sUbc0ol/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner","title":"sUbc0ol/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner","date":"2017-06-30","url":"https://github.com/sUbc0ol/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner"},{"source":"pocgithub","id":"sUbc0ol/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638","title":"sUbc0ol/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638","date":"2017-06-30","url":"https://github.com/sUbc0ol/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638"},{"source":"pocgithub","id":"R4v3nBl4ck/Apache-Struts-2-CVE-2017-5638-Exploit-","title":"R4v3nBl4ck/Apache-Struts-2-CVE-2017-5638-Exploit-","date":"2017-07-24","url":"https://github.com/R4v3nBl4ck/Apache-Struts-2-CVE-2017-5638-Exploit-"},{"source":"pocgithub","id":"Xhendos/CVE-2017-5638","title":"Xhendos/CVE-2017-5638","date":"2017-08-12","url":"https://github.com/Xhendos/CVE-2017-5638"},{"source":"pocgithub","id":"invisiblethreat/strutser","title":"invisiblethreat/strutser","date":"2017-09-25","url":"https://github.com/invisiblethreat/strutser"},{"source":"pocgithub","id":"c002/Apache-Struts","title":"c002/Apache-Struts","date":"2017-10-19","url":"https://github.com/c002/Apache-Struts"},{"source":"pocgithub","id":"donaldashdown/Common-Vulnerability-and-Exploit","title":"donaldashdown/Common-Vulnerability-and-Exploit","date":"2017-10-30","url":"https://github.com/donaldashdown/Common-Vulnerability-and-Exploit"},{"source":"pocgithub","id":"sighup1/cybersecurity-struts2","title":"sighup1/cybersecurity-struts2","date":"2018-01-18","url":"https://github.com/sighup1/cybersecurity-struts2"},{"source":"pocgithub","id":"cafnet/apache-struts-v2-CVE-2017-5638","title":"cafnet/apache-struts-v2-CVE-2017-5638","date":"2018-01-28","url":"https://github.com/cafnet/apache-struts-v2-CVE-2017-5638"},{"source":"pocgithub","id":"0x00-0x00/CVE-2017-5638","title":"0x00-0x00/CVE-2017-5638","date":"2018-02-15","url":"https://github.com/0x00-0x00/CVE-2017-5638"},{"source":"pocgithub","id":"m3ssap0/struts2_cve-2017-5638","title":"m3ssap0/struts2_cve-2017-5638","date":"2018-02-28","url":"https://github.com/m3ssap0/struts2_cve-2017-5638"},{"source":"pocgithub","id":"Greynad/struts2-jakarta-inject","title":"Greynad/struts2-jakarta-inject","date":"2018-03-14","url":"https://github.com/Greynad/struts2-jakarta-inject"},{"source":"pocgithub","id":"ggolawski/struts-rce","title":"ggolawski/struts-rce","date":"2018-03-20","url":"https://github.com/ggolawski/struts-rce"},{"source":"pocgithub","id":"win3zz/CVE-2017-5638","title":"win3zz/CVE-2017-5638","date":"2018-05-13","url":"https://github.com/win3zz/CVE-2017-5638"},{"source":"pocgithub","id":"leandrocamposcardoso/CVE-2017-5638-Mass-Exploit","title":"leandrocamposcardoso/CVE-2017-5638-Mass-Exploit","date":"2018-06-24","url":"https://github.com/leandrocamposcardoso/CVE-2017-5638-Mass-Exploit"},{"source":"pocgithub","id":"Iletee/struts2-rce","title":"Iletee/struts2-rce","date":"2018-06-26","url":"https://github.com/Iletee/struts2-rce"},{"source":"pocgithub","id":"andypitcher/check_struts","title":"andypitcher/check_struts","date":"2018-09-04","url":"https://github.com/andypitcher/check_struts"},{"source":"pocgithub","id":"un4ckn0wl3z/CVE-2017-5638","title":"un4ckn0wl3z/CVE-2017-5638","date":"2018-11-22","url":"https://github.com/un4ckn0wl3z/CVE-2017-5638"},{"source":"pocgithub","id":"colorblindpentester/CVE-2017-5638","title":"colorblindpentester/CVE-2017-5638","date":"2019-03-22","url":"https://github.com/colorblindpentester/CVE-2017-5638"},{"source":"pocgithub","id":"injcristianrojas/cve-2017-5638","title":"injcristianrojas/cve-2017-5638","date":"2019-08-15","url":"https://github.com/injcristianrojas/cve-2017-5638"},{"source":"pocgithub","id":"ludy-dev/XworkStruts-RCE","title":"ludy-dev/XworkStruts-RCE","date":"2020-08-31","url":"https://github.com/ludy-dev/XworkStruts-RCE"},{"source":"pocgithub","id":"sonatype-workshops/struts2-rce","title":"sonatype-workshops/struts2-rce","date":"2020-10-19","url":"https://github.com/sonatype-workshops/struts2-rce"},{"source":"pocgithub","id":"jongmartinez/CVE-2017-5638","title":"jongmartinez/CVE-2017-5638","date":"2020-12-06","url":"https://github.com/jongmartinez/CVE-2017-5638"},{"source":"pocgithub","id":"Badbird3/CVE-2017-5638","title":"Badbird3/CVE-2017-5638","date":"2021-06-24","url":"https://github.com/Badbird3/CVE-2017-5638"},{"source":"pocgithub","id":"jptr218/struts_hack","title":"jptr218/struts_hack","date":"2021-08-04","url":"https://github.com/jptr218/struts_hack"},{"source":"pocgithub","id":"testpilot031/vulnerability_struts-2.3.31","title":"testpilot031/vulnerability_struts-2.3.31","date":"2022-02-15","url":"https://github.com/testpilot031/vulnerability_struts-2.3.31"},{"source":"pocgithub","id":"readloud/CVE-2017-5638","title":"readloud/CVE-2017-5638","date":"2022-02-28","url":"https://github.com/readloud/CVE-2017-5638"},{"source":"pocgithub","id":"Tankirat/CVE-2017-5638","title":"Tankirat/CVE-2017-5638","date":"2022-03-28","url":"https://github.com/Tankirat/CVE-2017-5638"},{"source":"pocgithub","id":"mfdev-solution/Exploit-CVE-2017-5638","title":"mfdev-solution/Exploit-CVE-2017-5638","date":"2022-12-21","url":"https://github.com/mfdev-solution/Exploit-CVE-2017-5638"},{"source":"pocgithub","id":"mritunjay-k/CVE-2017-5638","title":"mritunjay-k/CVE-2017-5638","date":"2023-03-02","url":"https://github.com/mritunjay-k/CVE-2017-5638"},{"source":"pocgithub","id":"FredBrave/CVE-2017-5638-ApacheStruts2.3.5","title":"FredBrave/CVE-2017-5638-ApacheStruts2.3.5","date":"2023-05-10","url":"https://github.com/FredBrave/CVE-2017-5638-ApacheStruts2.3.5"},{"source":"pocgithub","id":"Nithylesh/web-application-firewall-","title":"Nithylesh/web-application-firewall-","date":"2024-07-11","url":"https://github.com/Nithylesh/web-application-firewall-"},{"source":"pocgithub","id":"kloutkake/CVE-2017-5638-PoC","title":"kloutkake/CVE-2017-5638-PoC","date":"2024-09-04","url":"https://github.com/kloutkake/CVE-2017-5638-PoC"},{"source":"pocgithub","id":"Xernary/CVE-2017-5638-POC","title":"Xernary/CVE-2017-5638-POC","date":"2024-12-08","url":"https://github.com/Xernary/CVE-2017-5638-POC"},{"source":"pocgithub","id":"NAIRBS/SC3010-Grp-33","title":"NAIRBS/SC3010-Grp-33","date":"2025-03-27","url":"https://github.com/NAIRBS/SC3010-Grp-33"},{"source":"pocgithub","id":"timothyjxhn/DeliberatelyVulnerableWebApp","title":"timothyjxhn/DeliberatelyVulnerableWebApp","date":"2025-03-27","url":"https://github.com/timothyjxhn/DeliberatelyVulnerableWebApp"},{"source":"pocgithub","id":"toothbrushsoapflannelbiscuits/cve-2017-5638","title":"toothbrushsoapflannelbiscuits/cve-2017-5638","date":"2025-05-02","url":"https://github.com/toothbrushsoapflannelbiscuits/cve-2017-5638"},{"source":"pocgithub","id":"haxerr9/CVE-2017-5638","title":"haxerr9/CVE-2017-5638","date":"2025-06-07","url":"https://github.com/haxerr9/CVE-2017-5638"},{"source":"pocgithub","id":"QHxDr-dz/CVE-2017-5638","title":"QHxDr-dz/CVE-2017-5638","date":"2025-07-27","url":"https://github.com/QHxDr-dz/CVE-2017-5638"},{"source":"pocgithub","id":"joidiego/Detection-struts-cve-2017-5638-detector","title":"joidiego/Detection-struts-cve-2017-5638-detector","date":"2025-07-30","url":"https://github.com/joidiego/Detection-struts-cve-2017-5638-detector"},{"source":"pocgithub","id":"iampetru/PoC-CVE-2017-5638","title":"iampetru/PoC-CVE-2017-5638","date":"2025-08-25","url":"https://github.com/iampetru/PoC-CVE-2017-5638"},{"source":"pocgithub","id":"MuhammadAbdullah192/CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION","title":"MuhammadAbdullah192/CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION","date":"2025-09-06","url":"https://github.com/MuhammadAbdullah192/CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION"},{"source":"pocgithub","id":"kaylertee/Computer-Security-Equifax-2017","title":"kaylertee/Computer-Security-Equifax-2017","date":"2025-09-11","url":"https://github.com/kaylertee/Computer-Security-Equifax-2017"},{"source":"pocgithub","id":"ACharaf06/CVE-2017-5638-Attack-and-Defense","title":"ACharaf06/CVE-2017-5638-Attack-and-Defense","date":"2025-12-15","url":"https://github.com/ACharaf06/CVE-2017-5638-Attack-and-Defense"},{"source":"pocgithub","id":"soufiane-benchahyd/vulhub-struts2","title":"soufiane-benchahyd/vulhub-struts2","date":"2026-02-20","url":"https://github.com/soufiane-benchahyd/vulhub-struts2"},{"source":"pocgithub","id":"AIPEACS/SC3010-Computer-Security","title":"AIPEACS/SC3010-Computer-Security","date":"2026-04-05","url":"https://github.com/AIPEACS/SC3010-Computer-Security"},{"source":"pocgithub","id":"Kouf320/docker-lab-cve-2017-5638-cve-2021-41773","title":"Kouf320/docker-lab-cve-2017-5638-cve-2021-41773","date":"2026-04-11","url":"https://github.com/Kouf320/docker-lab-cve-2017-5638-cve-2021-41773"},{"source":"pocgithub","id":"Majaktech/apache-struts-cve-2017-5638-project","title":"Majaktech/apache-struts-cve-2017-5638-project","date":"2026-05-18","url":"https://github.com/Majaktech/apache-struts-cve-2017-5638-project"},{"source":"pocgithub","id":"Dungsocool/CVE-2017-5638","title":"Dungsocool/CVE-2017-5638","date":"2026-05-26","url":"https://github.com/Dungsocool/CVE-2017-5638"},{"source":"pocgithub","id":"GU-007/struts2-tool","title":"GU-007/struts2-tool","date":"2026-09-03","url":"https://github.com/GU-007/struts2-tool"},{"source":"pocgithub","id":"Piyush-Tiwatne/struts-patch-gap-auditor","title":"Piyush-Tiwatne/struts-patch-gap-auditor","date":"2026-10-06","url":"https://github.com/Piyush-Tiwatne/struts-patch-gap-auditor"},{"source":"pocgithub","id":"s1kh/Vulnerability-Analysis-and-Mitigation","title":"s1kh/Vulnerability-Analysis-and-Mitigation","date":"2026-10-17","url":"https://github.com/s1kh/Vulnerability-Analysis-and-Mitigation"},{"source":"pocgithub","id":"Ethel087/CVE-2017-5638-Apache-Struts-Analysis","title":"Ethel087/CVE-2017-5638-Apache-Struts-Analysis","date":"2026-10-22","url":"https://github.com/Ethel087/CVE-2017-5638-Apache-Struts-Analysis"},{"source":"nuclei","id":"CVE-2017-5638","title":"Apache Struts 2 - Remote Command Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5638.yaml"}]}