Sploitus

Exploit for Missing Authentication for Critical Function in Oracle Weblogic Server

gitee Β· 2020-10-05

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=5C71E67D-065A-5494-A448-04CC169E6AF7
This is a PoC exploit for CVE-2017-10271, a vulnerability in Oracle WebLogic's wls-wsat component that allows for deserialization of untrusted data, leading to remote code execution. The exploit is written in Python and uses the requests library to send a malicious XML payload to the vulnerable endpoint. The payload is designed to execute a reverse shell on the attacker's machine, allowing them to gain access to the compromised system. The exploit is targeted at Windows and Unix-based systems, and is known to affect versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, and 12.2.1.2.0 of the Oracle WebLogic server.