Intelligence View
⚡ tsecurity.de Intelligence
Apache Struts REST Plugin With Dynamic Method Invocation Remote Code Execution
This Metasploit module exploits a remote command execution vulnerability in Apache Struts version between 2.3.20 and 2.3.28 (except 2.3.20.2 and 2.3.24.2). Remote Code Execution can be performed when using REST Plugin with ! operator when…
Reagiere als Erste:r — dein Feedback zählt!
This Metasploit module exploits a remote command execution vulnerability in Apache Struts version between 2.3.20 and 2.3.28 (except 2.3.20.2 and 2.3.24.2). Remote Code Execution can be performed when using REST Plugin with ! operator when Dynamic Method Invocation is enabled.
2. Cyber Threat Intelligence & Forensik
IoC Intelligence (2 Indikatoren)
2[.]3[.]20[.]22[.]3[.]24[.]2
CTI Threat Relationship Graph6 Knoten / 5 Relationen
MITRE ATT&CK Matrix Navigator 14 Taktiken
1 belegte TechnikenLive-Mapping
Reconnaissance
–
Resource Development
–
Initial Access
Execution
–
Persistence
–
Privilege Escalation
–
Defense Evasion
–
Credential Access
–
Discovery
–
Lateral Movement
–
Collection
–
Command and Control
–
Exfiltration
–
Impact
–