HatBoy/Struts2-Scan

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2220 stars · 472 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI tool that scans and exploits known Apache Struts2 vulnerabilities (S2-001 through S2-057) using publicly disclosed exploits. It supports single and batch URL scanning, command execution, reverse shells, web path discovery, and file upload.

Use cases

• scan a website for struts2 vulnerabilities
• batch scan multiple urls for s2-045
• get a reverse shell from a struts2 exploit
• check if my server is vulnerable to struts2 rce
• upload a webshell via struts2 vulnerability
• find the web root path on a vulnerable struts2 app
• test struts2 exploits against a lab environment

When to choose

• you need to test or exploit known Struts2 CVEs from a single tool
• you want batch scanning of many URLs for Struts2 flaws
• you need post-exploitation features like command execution or reverse shell on vulnerable Struts2 targets

When to avoid

• you need a general-purpose web vulnerability scanner beyond Struts2
• you require ongoing updates for newly disclosed vulnerabilities (last release 2021)
• you need a GUI or non-command-line workflow

Facets

cli-tool · maturity maintenance

penetration-testing vulnerability-scanning security http-client security penetration-testing web-development windows python cli struts2 exploit scanner rce vulnerability-exploitation pentest-tool linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="HatBoy/Struts2-Scan")