## https://sploitus.com/exploit?id=269EF54D-CFCE-51A6-886C-5955E87B4F3A
It is an offensive tool for WebLogic. The repository contains a basic proof-of-concept (PoC) and exploit script for WebLogic, with the goal of creating a unified detection and exploitation tool. The script, named `weblogic_poc.py`, uses the T3 protocol to connect to a WebLogic server and exploit vulnerabilities. The script is designed to be extensible and customizable, with plans to add support for various WebLogic versions and payloads. The tool is intended for educational purposes only and should not be used for malicious activities.
The script uses the `socket` library to establish a connection to the WebLogic server and sends a T3 handshake packet to initiate the exploitation process. The script then receives and prints the response from the server. The script also includes a `choose` method, which is not specified how it is invoked.
The tool exploits three vulnerabilities: CVE-2020-14644, CVE-2020-14645, and CVE-2020-14825. The first vulnerability is a deserialization vulnerability in the `com.tangosol.internal.util.invoke.ClassIdentity` class, which allows an attacker to inject malicious code. The second vulnerability is a deserialization vulnerability in the `com.tangosol.util.comparator.ExtractorComparator` class,