CVE Tracker

PoC Finder

Publicly known proof-of-concept links. Links only, never code.

Warning. Unverified third-party links. ThreatWire has not tested them. Many repos are fake, malware or for a different bug. Never run code you have not read, in an isolated lab only.

CVE-2017-5638IN CISA KEV 2021-11-03EPSS 100% (percentile 99th)Ransomware use

Publicly known references (40)

mazen160/struts-pwn
nomi-secgithub.com★ 442Updated 21 May 2018
Flyteas/Struts2-045-Exp
nomi-secgithub.com★ 61Updated 13 Mar 2017
immunio/apache-struts2-CVE-2017-5638
nomi-secgithub.com★ 34Updated 13 Mar 2017
jas502n/S2-045-EXP-POC-TOOLS
nomi-secgithub.com★ 25Updated 18 Aug 2021
PolarisLab/S2-045
nomi-secgithub.com★ 23Updated 7 Mar 2017
xsscx/cve-2017-5638
nomi-secgithub.com★ 22Updated 12 Mar 2017
jas502n/st2-046-poc
nomi-secgithub.com★ 21Updated 17 Aug 2018
win3zz/CVE-2017-5638
GitHub searchgithub.com★ 16Updated 13 May 2018
ret2jazzy/Struts-Apache-ExploitPack
nomi-secgithub.com★ 16Updated 12 Mar 2017
jrrdev/cve-2017-5638
nomi-secgithub.com★ 14Updated 4 Apr 2017
sUbc0ol/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638
nomi-secgithub.com★ 13Updated 30 Jun 2017
Iletee/struts2-rce
GitHub searchgithub.com★ 11Updated 15 Apr 2026
tahmed11/strutsy
nomi-secgithub.com★ 10Updated 1 Sept 2018
initconf/CVE-2017-5638_struts
nomi-secgithub.com★ 8Updated 15 Sept 2017
payatu/CVE-2017-5638
nomi-secgithub.com★ 8Updated 5 May 2017
0x00-0x00/CVE-2017-5638
GitHub searchgithub.com★ 6Updated 15 Feb 2018
iampetru/PoC-CVE-2017-5638
GitHub searchgithub.com★ 3Updated 25 Aug 2025
evolvesecurity/vuln-struts2-vm
GitHub searchgithub.com★ 3Updated 26 Sept 2017
R4v3nBl4ck/Apache-Struts-2-CVE-2017-5638-Exploit-
nomi-secgithub.com★ 3Updated 24 Jul 2017
falcon-lnhg/StrutsShell
nomi-secgithub.com★ 3Updated 4 Apr 2017
opt9/Strutscli
nomi-secgithub.com★ 2Updated 28 Mar 2017
opt9/Strutshock
nomi-secgithub.com★ 2Updated 16 Mar 2017
lolwaleet/ExpStruts
nomi-secgithub.com★ 2Updated 12 Mar 2017
aljazceru/CVE-2017-5638-Apache-Struts2
nomi-secgithub.com★ 2Updated 11 Mar 2017
riyazwalikar/struts-rce-cve-2017-5638
nomi-secgithub.com★ 1Updated 8 Jun 2017
jpacora/Struts2Shell
nomi-secgithub.com★ 1Updated 3 Jun 2017
KarzsGHR/S2-046_S2-045_POC
nomi-secgithub.com★ 1Updated 26 Apr 2017
oktavianto/CVE-2017-5638-Apache-Struts2
nomi-secgithub.com★ 1Updated 20 Mar 2017
Masahiro-Yamada/OgnlContentTypeRejectorValve
nomi-secgithub.com★ 1Updated 13 Mar 2017
jrrombaldo/CVE-2017-5638
nomi-secgithub.com★ 0Updated 29 Mar 2024
SpiderMate/Stutsfi
nomi-secgithub.com★ 0Updated 13 Jan 2018
invisiblethreat/strutser
nomi-secgithub.com★ 0Updated 28 Sept 2017
Xhendos/CVE-2017-5638
nomi-secgithub.com★ 0Updated 26 Aug 2017
sUbc0ol/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner
nomi-secgithub.com★ 0Updated 30 Jun 2017
eeehit/CVE-2017-5638
nomi-secgithub.com★ 0Updated 13 Jun 2017
homjxi0e/CVE-2017-5638
nomi-secgithub.com★ 0Updated 8 Jun 2017
smancke/CVE-2017-5638
nomi-secgithub.com★ 0Updated 5 Jun 2017
Aasron/Struts2-045-Exp
nomi-secgithub.com★ 0Updated 1 Jun 2017
c002/Apache-Struts
nomi-secgithub.com★ 0Updated 28 May 2017
mcassano/cve-2017-5638
nomi-secgithub.com★ 0Updated 1 Apr 2017

Sources: NVD (Exploit-tagged references), CISA KEV, nomi-sec/PoC-in-GitHub, GitHub repository search, Exploit-DB links from NVD. Fetched 18 Oct 2026; cached for a few hours.