weblogic

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG等功能，持续开发中 http://medusa.ascotbe.com

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

for mass exploiting

Getting started with java code auditing 代码审计入门的小项目

Java漏洞学习笔记 Deserialization Vulnerability

Oracle Weblogic Server Kubernetes Operator

Weblogic coherence.jar RCE

适用于weblogic和Tomcat的无shell的内存马

Free universal JMS client

Oracle WebLogic Server Deploy Tooling

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch

JAVA 漏洞调试项目，主要为复现、调试java相关的漏洞。

WebLogic Monitoring Exporter exposes metrics and monitoring data through REST APIs for consumption by other tools (e.g. Prometheus)

Codehaus Cargo source code

Oracle WebLogic Image Tool

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

CVE-2021-2109 && Weblogic Server RCE via JNDI

Export server logs from WebLogic Server in JSON format to Elasticsearch.

A WebLogic Console that connects remotely using the WebLogic Management REST API

Use shell to build weblogic debug environment for CVE-2020-2551

An example of a spring boot application that can be deployed to a legacy weblogic server which uses servlet 2.5 api

weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory

An Ansible playbook to configure a CentOS/RHEL/Oracle Linux 7 server with Oracle Fusion Middleware 12.2.1.3

Weblogic Spring Boot PreAuthorization using Realms Demo

Extensible Weblogic scripting framework for locally executing remote resource management

Presents in detail how to access WebLogic MBeans through JMX clients

Auto Scalable and Highly Available Weblogic Cluster

Install patch by smart update for WebLogic Server 10.3.3 - 12.1.1

Kafka Connector for Oracle WebLogic JMS