Cybersecurity-Capstone-Project

Cybersecurity-Capstone-Project Overview This repository contains my Cybersecurity Capstone Project completed as part of NCSC Nashama CyberCamp 11 , delivered in collaboration with IT Security C &T. The project demonstrates a complete vulnerability assessment workflow for two enterprise-level...

weblogic_wls_rce_poc-exp

weblogicwls-wsatcomponentdeserialisationrcecve-2017-10271 poc&exp exp only works while the path is exist can works for single or multiple ==just for learn==...

weblogic-CVE-2019-2729-POC

weblogic-CVE-2019-2729-POC python3 POC for CVE-2019-2729 WebLogic Deserialization Vulnerability and CVE-2017-10271 amongst others...

WebLogic_CNVD_C2019_48814

7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Vulnerability Description In the early days, hackers exploited the WLS component vulnerability of WebLogic to launch large-scale remote attacks against enterprise servers. A large number of enterprise servers were compromised, an...

CVE-2017-10271

CVE-2017-10271 Usage: CVE-2017-12149.py http://targetip:port/ WEBLOGIC RCE Work with windows only, you could edit code a bit for linux...

Weblogic_Wsat_RCE

WeblogicWsatRCE POC for CVE-2017-10271. Since java.lang.ProcessBuilder was the original vector for RCE, there are multiple signature based rules that block this particular payload. Added java.lang.Runtime and will add others in the future. This is for educational purposes only: I take no...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

PoCs-Weblogic_2017_10271

PoCs-Weblogic201710271 Simplified PoC for Weblogic-CVE-2017-10271...

JavaDeserialization

Java Deserialization Vulnerability Scanner A Java deserialization vulnerability scanner for vulnerabilities similar to CVE-2017-10271. This project currently contains only one PoC; others have not been organized yet. Installation 1. Install nmap ​ https://nmap.org/download.html Download the...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....

CVE-2017-10271

CVE-2017-10271 WebLogic wls-wsat component deserialization vulnerability CVE-2017-10271 detection script Usage $ python CVE-2017-10271 url You also need to register an account on ceye.io, and fill in the Identifier and API Token provided by it in the following part of the code: Features Detect...

weblogic_honeypot

WebLogic honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Written by: Omer Cohen @omercnet Special thanks: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev Contact: [email protected] WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic...

WebLogic_CNVD_C_2019_48814

WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

CVE-2017-10271

This repository does not have a README...

CVE-2017-10271

CVE-2017-10271 Usage: python CVE-2017-10271.py url...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

PoC exploit for CVE-2017-10271, a remote code execution vulnerab...

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server. "The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware...

dimy.com.ar Improper Access Control vulnerability OBB-3779650

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

PoC exploit for CVE-2017-10271, an unauthenticated Weblogic RCE. The target product/service is Weblogic, and the vulnerability class/vector is RCE Remote Code Execution. The probable entry point is the CoordinatorPortType SOAP endpoint. Notable dependencies/tooling include the requests library an...