OAMBuster

OAMBuster 针对 Oracle OAM 的多线程 Padding Oracle 攻击（CVE-2018-2879） 作者 Red Timmy Marco Ortisi, Stefan Broeder, Ahmad Mahfouz 描述 此多线程漏洞利用工具的开发目的是大幅提高攻击速度，相比单线程版本。 如需了解该攻击的技术细节，请参阅 SEC Consult 的这篇博客文章： https://sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/ 前两个阶段将快速验证网站是否易受此攻击影响。 ...

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit 简介 此漏洞利用工具是在针对 Oracle OAM 11.1.2.3.0 的渗透测试活动中开发的。它基于 sec-consult 的技术描述编写： https://www.sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/ 依赖要求 该漏洞利用工具依赖于 python-paddingoracle，可从此处下载：...

oracle-oam-authentication-bypas-exploit

Oracle Access Manager OAM 身份验证绕过利用工具 介绍 利用Oracle Access Manager OAM 填充预言机漏洞（CVE-2018-2879），通过有效用户名绕过身份验证并登录任何受OAM保护的Web应用。 此利用工具基于SEC Consult发现的OAM填充预言机漏洞，并在OAM v12.2.1.3.0上进行了测试。 https://www.sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/ 依赖 pip install urllib3...

SUSE: Security Advisory (SUSE-SU-2018:2879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

U.S. Dept Of Defense: [HTAF4-213] [Pre-submission] CVE-2018-2879 (padding oracle attack in the Oracle Access Manager) at https://█████████

Description We were able to identify CVE-2018-2879 in Oracle Access Manager, used on the https://██████ Link to the CVE: https://nvd.nist.gov/vuln/detail/CVE-2018-2879 This vulnerability is rated critical, and may allow unauthenticated attacker with network access via HTTP to compromise Oracle...

Oracle Access Manager Multiple Vulnerabilities (Apr 2018 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid109733; scriptversion"1.8";...

CVE-2018-2879

creationtimestamp| type| source ---|---|--- 2018-05-04 10:03:05+00:00| seen| https://t.me/SecLabNews/2121 2023-04-29 13:55:46+00:00| published-proof-of-concept| https://t.me/criticalbug/775 2024-10-14 21:03:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/494...

CVE-2018-2879

The CVE-2018-2879 issue affects Oracle Access Manager (part of Oracle Fusion Middleware) specifically the Authentication Engine in versions 11.1.2.3.0 and 12.2.1.3.0. The root cause is a vulnerability that enables unauthenticated attackers with network access over HTTP to compromise Oracle Access...