OGNL Context Variable Manipulation in XWork/Struts2

This repository contains a single Metasploit module (modules/exploits/multi/http/struts_code_exec.rb) that exploits a remote code execution vulnerability in Apache Struts versions prior to 2.2.0 (CVE-2010-1870). The exploit leverages improper handling of unicode characters in OGNL expressions to bypass security restrictions and execute arbitrary Java code on the server. The module supports both Linux and Windows targets, automatically staging and executing payloads appropriate for each platform. For Linux, it uploads a base64-encoded ELF binary to /tmp, decodes, and executes it. For Windows, it uses TFTP to stage the payload. The module is highly weaponized, leveraging Metasploit's payload system for customizable post-exploitation. The main attack vector is network-based, targeting HTTP endpoints of Struts applications. The only required input is the URI of a vulnerable Struts action, which is configurable. The repository is structured as a typical Metasploit exploit module, with all logic contained in a single Ruby file.