Lucifer1993/struts-scan

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1412 stars · 498 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python2 command-line tool that detects and exploits Apache Struts2 remote code execution vulnerabilities across all major versions (ST2-005 through ST2-057). It supports batch scanning and interactive shell command exploitation for vulnerable targets.

Use cases

• scan a web server for struts2 command execution vulnerabilities
• batch-check multiple URLs for struts2 RCE
• verify whether a struts2-045 or struts2-057 vulnerability is exploitable
• get an interactive shell on a vulnerable struts2 application during a pentest
• detect which struts2 CVE affects a target app
• write scan results of vulnerable hosts to a file

When to choose

• you need to test legacy Java web apps for known Struts2 RCE flaws
• you want batch detection plus exploitation in one tool
• you're doing authorized penetration testing on Struts2-based applications

When to avoid

• you need a maintained tool - it's Python2-only and last released in 2019
• you need general web vulnerability scanning beyond Struts2
• you lack authorization to test the target - this is an offensive tool

Facets

cli-tool · maturity maintenance

vulnerability-scanning security http-client security penetration-testing web-development windows cli python struts2 vulnerability-scanner exploitation python2 rce penetration-testing batch-scanning linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Lucifer1993/struts-scan")