EternalSec·Sep 18Apache Struts 2 REST Plugin XStream Deserialization: When XML Requests Become Remote Code ExecutionA trusted XML request should never be able to decide which Java objects your server creates.
The Skillpods·Jun 15Apache Struts2: The HTTP Header That Breached EquifaxHow one malformed Content-Type header turned a web framework into a remote shell — and exposed 147 million people.
InInfoSec Write-upsbyMrXcrypt·Jan 27, 2025Strutted Walkthrough — HackTheBoxStrutted — a Medium Linux Machine teaches Apache Struts 2 CVE and then misconfigured sudo permission.
Hayden Baillio·Jan 14, 2025Your Company Will Get Hacked Because You’re Too Busy Playing Corporate Politics to Care About…Let’s cut the BS: Your security team found this Apache vulnerability weeks ago. They probably sent you an urgent Slack message about it…
Hayden Baillio·Dec 23, 2024CVE-2024–53677 in Apache Struts: Enough With the FOMO, Patching Is PossibleWhy you don’t actually have to toss out your entire legacy Struts app to stay safe.
Imran Khan·Oct 14, 2022Struts User and Session Management in 10 minThis is a complete guide to build a User and Session Management application using struts2.
Imran Khan·Oct 8, 2022Struts2 with annotation in 10 minWe can create Struts2 application either wit the help of bean.xml where we define action mapping.
Imran Khan·Oct 6, 2022Struts2 using bean XML Project Setup in 10 minI always try to write things in such a manner that everyone will be able to read and learn things in one sitting. This will also help you…
Raghul·Aug 19, 2022Benefits and Structure of StrutsWe’ll talk about the struts Framework, its benefits, and what it can achieve in Java. This post describes the benefits and framework of…
Mark·Aug 29, 2021Feature flags in Struts 2 applicationsFeature flags or toggles are a handy technique for releasing your changes to production without much worry as they won’t be visible to…A response icon1A response icon1
