CVE-2019-2725

by TopScrew

TopScrew / CVE-2019-2725

CVE-2019-2725命令回显+webshell上传+最新绕过

138 Stars 57 Forks Last release: Not found 20 Commits 0 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

CVE-2019-2725

weblogic命令回显+webshell上传

免责声明:本工具仅供安全测试学习用途,禁止非法使用
weblogic命令回显+webshell上传
脚本简介:
本脚本是基于weblogic 10.3.6和12.1.3版本进行测试,并用python3编写。
10.3.6使用的jdk7u21的payload
12.1.3使用的org.slf4j.ext.EventData类二次反序列化
py依赖的第三方库 requests、logzero

基础参数:

10.0.3效果图

命令回显:

10.0.3效果图

Webshell上传:

10.0.3效果图

参考:https://mp.weixin.qq.com/s/rI6VGSiQ0SbGWUjQpQ-qfw

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.