Author Archives: Christopher Fearon

During our CVE-2018-11776 research, we created our own proofs-of-concept so they’d work in a variety of configurations at scale (115 versions of Struts).
The post Apache Struts research at scale, Part 3: Exploitation appeared first on Software I… Continue reading Apache Struts research at scale, Part 3: Exploitation→

During our CVE-2018-11776 research, after building 115 versions of Apache Struts, we had to address the challenges of recreating the execution environments.
The post Apache Struts research at scale, Part 2: Execution environments appeared first on Sof… Continue reading Apache Struts research at scale, Part 2: Execution environments→

When our research findings from CVE-2018-11776 prompted us to research other vulnerabilities, the first step was building 115 versions of Apache Struts.
The post Apache Struts research at scale, Part 1: Building 115 versions of Struts appeared first o… Continue reading Apache Struts research at scale, Part 1: Building 115 versions of Struts→