SWIFT NETWORK CODE INJECTION NSA EQUATION GROUP

This module exploits a remote code execution vunlerability in Apache Struts version 2.3.5 - 2.3.31, and 2.5 - 2.5.10. Remote Code Execution can be performed via http Content-Type header. Native payloads will be converted to executables and dropped in the server’s temp dir. If this fails, try a cmd/* payload, which won’t have to write to the disk.

Apache Struts Jakarta Multipart Parser OGNL Injection

This module exploits a remote code execution vunlerability in Apache Struts version 2.3.5 - 2.3.31, and 2.5 - 2.5.10. Remote Code Execution can be performed via http Content-Type header.

VULNERS.COM

https://vulners.com/metasploit/MSF:EXPLOIT/MULTI/HTTP/STRUTS2_CONTENT_TYPE_OGNL