Re: How to determine if a Windows server is running Apache Struts?

2017-09-06 Thread Sean Son
On Wed, Sep 6, 2017 at 7:56 PM, Ken McWilliams wrote: > Programs can also be "exploded" (not in any type of zip file) so be sure to > search all files in the normal filesystem as well. To test your script just > create a couple zip files with some nested folders where

Re: How to determine if a Windows server is running Apache Struts?

2017-09-06 Thread Ken McWilliams
Programs can also be "exploded" (not in any type of zip file) so be sure to search all files in the normal filesystem as well. To test your script just create a couple zip files with some nested folders where you have placed some made up files either called "struts.xml" or "struts2-core-*.jar" to

Re: How to determine if a Windows server is running Apache Struts?

2017-09-06 Thread Ken McWilliams
Struts isn't a stand alone program but a framework, typically seen as project dependency which supports web development on the JVM. I don't know the answer to 1) [although I will at the end go though the process I would attempt to find such programs]. 2) No. Struts2 [which is different code base

How to determine if a Windows server is running Apache Struts?

2017-09-06 Thread Sean Son
Hello all I am new to the mailing list as well as new to Apache Struts. We all heard in the news about the vulnerability affecting Apache Struts. I have been tasked to determine which of our servers have Struts running on them. I have a few questions on how to determine if a server is running