22 matches found
CVE-2023-21839-metasploit-scanner
CVE-2023-21839-metasploit-scanner 使用方法 git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner cd CVE-2023-21839-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp weblogiciioprce.py /.msf4/modules/auxiliary/scanner/http chmod +x...
POC_CVE-2023-21839
CVE-2023-21839 依据特殊需求将@4ra1n 大佬的GO版本翻译成了Python，再此感谢！ 免责声明 本程序应仅用于授权的安全测试与研究目的，请使用者遵照网络安全法合理使用。 使用者使用该工具出现任何非法攻击等违法行为，与作者无关。 使用 vulhub 复现：链接 / /\ //\ | \ / \ | / | / | // \ / / \ \ / /\ | | | | | | \ | |/ \ | \ | / / \ V //|/ /| || / / |/ /| | | , | / // ||/|/ |||// // usage:...
Weblogic
English｜ 中文 WebLogic漏洞研究专题 Weblogic CVE-2023-21931 漏洞挖掘技巧：后反序列化利用 摘要：近些年，Weblogic反序列化漏洞一直围绕着反序列化的触发点进行漏洞挖掘，事实上还有很多存在反序列化但无法实时利用的点，在大家平时的漏洞挖掘中容易忽略。在行业内也有一些关于”后反序列化“的进一步讨论，这些看似无法利用的漏洞，其实可以通过一些后续的技巧完成稳定的利用效果。例如，进行bind或rebind操作后，并没有触发漏洞，此时可以尝试其他方法如lookup、lookupLink等触发漏洞。...
Weblogic-CVE-2023-21839
Weblogic-CVE-2023-21839 CVE-2023-21839 根据网络公开poc造的轮子 影响版本 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 使用方法 java -jar 目标ip:端口 ldap地址 推荐工具： https://github.com/WhiteHSBG/JNDIExploit 免责声明 此工具仅作为网络安全攻防研究交流，请使用者遵照网络安全法合理使用！ 如果使用者使用该工具出现任何非法攻击等违法行为，与作者无关！...
Vulhub-vulnerability-reproduction-reports
Vulnerability Reproduction Reports This folder contains all v...
CVE-2023-21839
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...
8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining
Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server. "The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware...
Oracle WebLogic Server OS Command Injection Flaw Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as CVE-2017-3506 CVSS score: 7.4, the issue concerns an operati...
Decoding Water Sigbin's Latest Obfuscation Tricks
Water Sigbin aka the 8220 Gang exploited the Oracle WebLogic vulnerabilities CVE-2017-3506 and CVE-2023-21839 to deploy a cryptocurrency miner using a PowerShell script. The threat actor also adopted new techniques to conceal its activities, making attacks harder to defend against...
Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike
Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-3919...
Oracle Weblogic PreAuth Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule Taken from page 24 of https://docs.oracle.com/cd/E1321101/wle/wle42/corba/giop.pdf NOEXCEPTION = 0 USEREXCEPTION = 1 SYSTEMEXCEPTION = 2...
Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server
CVE-2023-21839-metasploit-scanner Usage git clone https://...
Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”
On May 1, 2023 the Cybersecurity and Infrastructure Security Agency CISA added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies are obliged to remediate the...
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The security vulnerabilities are as follows - CVE-2023-1389 CVSS score: 8.8 - TP-Link Archer AX-21 Command Injection...
VulnCheck KEV: CVE-2023-21839
Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server...
Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server
CVE-2023-21839 Due to special requirements, the GO version of...
Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server
WebLogic-CVE-2023-21839 CVE-2023-21839 is a vulnerability cre...
Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server
WebLogic-CVE-2023-21839 CVE-2023-21839 is a vulnerability cre...
CVE-2023-21839
creationtimestamp| type| source ---|---|--- 2023-01-29 15:43:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3716 2023-02-22 06:20:02+00:00| published-proof-of-concept| Telegram/rtIvSzNDcGJDjAmNbpFbRjMYLO0j4LkJOjAcfYVbCa7YVw 2023-02-22 08:16:14+00:00| published-proof-of-concept|...
