feat: add Apache Struts2 dockerfile in pocs, add wait container start check.

wh0am1i · rungobier · commit c189624e687a · 2023-12-26T14:23:31.000+08:00
diff --git a/pocsuite3/lib/controller/controller.py b/pocsuite3/lib/controller/controller.py
@@ -1,5 +1,7 @@
 import copy
 import time
+
+import requests
 from prettytable import PrettyTable
 from pocsuite3.lib.core.common import data_to_stdout, mosaic
 from pocsuite3.lib.core.data import conf, cmd_line_options
@@ -88,12 +90,27 @@ def show_task_result():
     data_to_stdout("\nsuccess : {} / {}\n".format(success_num, total_num))
 
 
+def check_docker_status(target):
+    if conf.docker_start:
+        info_msg = "wait for docker..."
+        logger.info(info_msg)
+        while True:
+            try:
+                resp = requests.get(target)
+                if resp.status_code:
+                    break
+            except Exception:
+                pass
+
+
 def task_run():
     while not kb.task_queue.empty() and kb.thread_continue:
         target, poc_module = kb.task_queue.get()
         if not conf.console_mode:
             poc_module = copy.deepcopy(kb.registered_pocs[poc_module])
         poc_name = poc_module.name
+        # check container status
+        check_docker_status(target)
 
         if conf.pcap:
             # start capture flow
diff --git a/pocsuite3/pocs/Apache_Struts2/20090323_WEB_Apache_Struts2_001_RCE.py b/pocsuite3/pocs/Apache_Struts2/20090323_WEB_Apache_Struts2_001_RCE.py
@@ -24,6 +24,7 @@ class DemoPOC(POCBase):
     desc = '''S2-001:影响版本Struts 2.0.0-2.0.8'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20090323_WEB_Apache_Struts2_003_RCE_CVE-2008-6504.py b/pocsuite3/pocs/Apache_Struts2/20090323_WEB_Apache_Struts2_003_RCE_CVE-2008-6504.py
@@ -22,6 +22,7 @@ class DemoPOC(POCBase):
     desc = '''Struts 2.0.0 - Struts 2.1.8.1'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20100510_WEB_Apache_Struts2_005_RCE_CVE-2010-1870.py b/pocsuite3/pocs/Apache_Struts2/20100510_WEB_Apache_Struts2_005_RCE_CVE-2010-1870.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''Struts 2.0.0 - Struts 2.1.8.1'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20111001_WEB_Apache_Struts2_009_RCE_CVE-2011-3923.py b/pocsuite3/pocs/Apache_Struts2/20111001_WEB_Apache_Struts2_009_RCE_CVE-2011-3923.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-009:影响版本Struts 2.0.0-2.3.1.1'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20120108_WEB_Apache_Struts2_007_RCE.py b/pocsuite3/pocs/Apache_Struts2/20120108_WEB_Apache_Struts2_007_RCE.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-007:影响版本Struts 2.0.0 - Struts 2.2.3'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20120108_WEB_Apache_Struts2_008_RCE_CVE-2012-0394.py b/pocsuite3/pocs/Apache_Struts2/20120108_WEB_Apache_Struts2_008_RCE_CVE-2012-0394.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''[+] S2-008:影响版本Struts 2.1.0-2.3.1; GET请求发送数据; 支持任意命令执行和反弹shell'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_012_RCE_CVE-2013-1965.py b/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_012_RCE_CVE-2013-1965.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-012:影响版本Struts Showcase App 2.0.0 - Struts Showcase App 2.3.14.2'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_013_RCE_CVE-2013-1966.py b/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_013_RCE_CVE-2013-1966.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-013/S2-014:影响版本Struts 2.0.0-2.3.14.1'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_015_RCE_CVE-2013-2134.py b/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_015_RCE_CVE-2013-2134.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-015:影响版本Struts 2.0.0-2.3.14.2;'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_016_RCE_CVE-2013-2251.py b/pocsuite3/pocs/Apache_Struts2/20130219_WEB_Apache_Struts2_016_RCE_CVE-2013-2251.py
@@ -24,6 +24,7 @@ class DemoPOC(POCBase):
     desc = '''S2-015:影响版本Struts 2.0.0 - Struts 2.3.15;'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20130612_WEB_Apache_Struts2_019_RCE_CVE-2013-4316.py b/pocsuite3/pocs/Apache_Struts2/20130612_WEB_Apache_Struts2_019_RCE_CVE-2013-4316.py
@@ -24,6 +24,7 @@ class DemoPOC(POCBase):
     desc = '''S2-019:影响版本Struts 2.0.0-2.3.15.1'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20131203_WEB_Apache_Struts2_020_RCE_CVE-2014-0094.py b/pocsuite3/pocs/Apache_Struts2/20131203_WEB_Apache_Struts2_020_RCE_CVE-2014-0094.py
@@ -28,6 +28,7 @@ class DemoPOC(POCBase):
     '''
     samples = []
     install_requires = ['']
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def getLink(self, url):
         '''使用正则得到页面中.action和.do链接'''
diff --git a/pocsuite3/pocs/Apache_Struts2/20150701_WEB_Apache_Struts2_025_RCE_CVE-2015-5169.py b/pocsuite3/pocs/Apache_Struts2/20150701_WEB_Apache_Struts2_025_RCE_CVE-2015-5169.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-devMode:影响版本Struts 2.0.0 - Struts Struts 2.3.16.3'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20151216_WEB_Apache_Struts2_029_RCE_CVE-2016-0785.py b/pocsuite3/pocs/Apache_Struts2/20151216_WEB_Apache_Struts2_029_RCE_CVE-2016-0785.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-029:影响版本Struts 2.0.0-2.3.24.1(除了2.3.20.3); '''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20160310_WEB_Apache_Struts2_032_RCE_CVE-2016-3081.py b/pocsuite3/pocs/Apache_Struts2/20160310_WEB_Apache_Struts2_032_RCE_CVE-2016-3081.py
@@ -22,6 +22,7 @@ class DemoPOC(POCBase):
     desc = '''S2-032:影响版本Struts 2.3.20-2.3.28(除了2.3.20.3和2.3.24.3);'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20160310_WEB_Apache_Struts2_033_RCE_CVE-2016-3087.py b/pocsuite3/pocs/Apache_Struts2/20160310_WEB_Apache_Struts2_033_RCE_CVE-2016-3087.py
@@ -22,6 +22,7 @@ class DemoPOC(POCBase):
     desc = '''S2-033:影响版本Struts 2.3.20-2.3.28(除了2.3.20.3和2.3.24.3)'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20160502_WEB_Apache_Struts2_037_RCE_CVE-2016-4438.py b/pocsuite3/pocs/Apache_Struts2/20160502_WEB_Apache_Struts2_037_RCE_CVE-2016-4438.py
@@ -22,6 +22,7 @@ class DemoPOC(POCBase):
     desc = '''S2-037:Struts 2.3.20 - Struts Struts 2.3.28.1'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20170129_WEB_Apache_Struts2_045_RCE_CVE-2017-5638.py b/pocsuite3/pocs/Apache_Struts2/20170129_WEB_Apache_Struts2_045_RCE_CVE-2017-5638.py
@@ -24,6 +24,7 @@ class DemoPOC(POCBase):
     desc = '''S2-045:影响版本Struts 2.3.5 - Struts 2.3.31, Struts 2.5 - Struts 2.5.10'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20170411_WEB_Apache_Struts2_046_RCE_CVE-2017-7672.py b/pocsuite3/pocs/Apache_Struts2/20170411_WEB_Apache_Struts2_046_RCE_CVE-2017-7672.py
@@ -21,6 +21,7 @@ class DemoPOC(POCBase):
     desc = '''S2-046:影响版本Struts 2.3.5-2.3.31,2.5-2.5.10'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20170621_WEB_Apache_Struts2_048_RCE_CVE-2017-9791.py b/pocsuite3/pocs/Apache_Struts2/20170621_WEB_Apache_Struts2_048_RCE_CVE-2017-9791.py
@@ -23,6 +23,7 @@ class DemoPOC(POCBase):
     desc = '''S2-048:影响版本Struts 2.3.x with Struts 1 plugin and Struts 1 action; '''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20170621_WEB_Apache_Struts2_052_RCE_CVE-2017-9805.py b/pocsuite3/pocs/Apache_Struts2/20170621_WEB_Apache_Struts2_052_RCE_CVE-2017-9805.py
@@ -22,6 +22,7 @@ class DemoPOC(POCBase):
     desc = '''S2-052:影响版本Struts 2.1.2-2.3.33,2.5-2.5.12; POST请求发送数据,不需要参数;'''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20170807_WEB_Apache_Struts2_053_RCE_CVE-2017-12611.py b/pocsuite3/pocs/Apache_Struts2/20170807_WEB_Apache_Struts2_053_RCE_CVE-2017-12611.py
@@ -25,6 +25,7 @@ class DemoPOC(POCBase):
     desc = '''S2-053:影响版本Struts 2.0.1-2.3.33,2.5-2.5.10.1; '''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20180605_WEB_Apache_Struts2_057_RCE_CVE-2018-11776.py b/pocsuite3/pocs/Apache_Struts2/20180605_WEB_Apache_Struts2_057_RCE_CVE-2018-11776.py
@@ -39,6 +39,7 @@ class DemoPOC(POCBase):
     '''
     samples = []
     install_requires = ['']
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20200812_WEB_Apache_Struts2_061_RCE_CVE-2020-17530.py b/pocsuite3/pocs/Apache_Struts2/20200812_WEB_Apache_Struts2_061_RCE_CVE-2020-17530.py
@@ -30,6 +30,7 @@ class DemoPOC(POCBase):
     '''
     samples = []
     install_requires = ['']
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
diff --git a/pocsuite3/pocs/Apache_Struts2/20211126_WEB_Apache_Struts2_Log4j2_RCE_CVE-2021-44228.py b/pocsuite3/pocs/Apache_Struts2/20211126_WEB_Apache_Struts2_Log4j2_RCE_CVE-2021-44228.py
@@ -536,6 +536,7 @@ class DemoPOC(POCBase):
     desc = '''
     Apache Struts 2 Log4j RCE
     '''
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _rce(self):
         flag = random_str()
diff --git a/pocsuite3/pocs/Apache_Struts2/20231204_WEB_Apache_Struts2_066_RCE_CVE-2023-50164.py b/pocsuite3/pocs/Apache_Struts2/20231204_WEB_Apache_Struts2_066_RCE_CVE-2023-50164.py
@@ -21,6 +21,7 @@ class DemoPOC(POCBase):
     desc = ''''''
     samples = []
     category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
 
     def _options(self):
         o = OrderedDict()
