Struts vulnerable ISOs.
https://pentesterlab.com/exercises/s2-045
https://struts.apache.org/docs/s2-045.html – CVE-2017-5638
https://pentesterlab.com/exercises/s2-052
https://struts.apache.org/docs/s2-052.html – CVE-2017-9805
Pentesterlab has over 20 free labs where you can learn some techniques used for some pretty big vulns that happened over the past few years.
Pro version is 20 bucks a month.
Good to see someone doing this again. The old De-ICE ISOs were a ton of fun.
If you cannot upgrade, Struts2 vulnerabilities can be prevented with the commercial version of mod_security. https://ssl.trustwave.com/web-application-firewall
0 Comments