/Oracle-WLS-Weblogic-RCE

(CVE-2019-2725) Oracle WLS(Weblogic) RCE test sciript

Primary LanguagePython

Oracle-WLS-Weblogic-RCE

(CVE-2019-2725) Oracle WLS(Weblogic) RCE test sciript

CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication.

This script which check the presence or absence of a page is based on Python3. (Updated. 20.11.07.)

Usage>

python Oracle WLS(Weblogic) RCE(CVE-2019-2725).py <dst_ip> <dst_port> (user defined port)

python Oracle WLS(Weblogic) RCE(CVE-2019-2725).py <dst_ip> (default : 80/tcp)