File Upload Restriction Bypass to Remote Code Execution (CVE-2024-53677) HTB Strutted Walkthrough
Автор: CTF Security
Загружено: 2025-06-04
Просмотров: 516
Описание:
In this video, I walk you through the HTB Strutted machine, demonstrating how to exploit CVE-2024-53677 — a critical Apache Struts 2 vulnerability that allows Remote Code Execution (RCE) via a malicious file upload.
We’ll explore how a crafted Content-Type header during a multipart form upload can trigger OGNL injection and give us command execution on the server.
🔍 Key Topics Covered:
Vulnerability overview (CVE-2024-53677)
File upload bypass using Content-Disposition header manipulation
Remote Code Execution in Apache Struts 2
Step-by-step exploitation on HTB’s Strutted box
💥 Exploit Code (PoC):
🔗 https://github.com/r007sec/CVE-2024-5...
🧠 To learn more about file upload bypass via the Content-Disposition header, check this video:
🔗
• Path Traversal and File Upload Bypass Expl...
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке:
