Sploitus

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

githubexploit · 2021-05-13

Exploit Code

README9 lines
## https://sploitus.com/exploit?id=29FE8BBC-6003-591C-8E89-6836D0994CF1
# ofbiz-poc  
CVE-2020-9496 and CVE_2020_9496 utilize dnslog for batch vulnerability validation.  

## OFBiz_CVE_2020_9496.py and OFBiz_CVE_2021_26295.py perform individual vulnerability validation.  

## ofbiz_poc.py performs batch validation of two vulnerabilities. It requires saving websites that need batch validation in the `urls.txt` file.  

### To reproduce the vulnerabilities, please refer to: [https://yuaneuro.cn/archives/ofbiz.html](https://yuaneuro.cn/archives/ofbiz.html)