## https://sploitus.com/exploit?id=6CEDC0A8-892E-535A-8220-7BDB1B58BA2E
This is an exploit module for the CVE-2020-14756 vulnerability in Oracle WebLogic. The vulnerability allows for remote code execution (RCE) due to a deserialization issue in the coherence.jar library.
The exploit is written in Python and uses the socket library to establish a connection to the vulnerable WebLogic server. The exploit sends a specially crafted payload to the server, which is then executed by the server's Java Virtual Machine (JVM).
The payload is a serialized Java object that contains a malicious class that is used to execute the RCE. The class is serialized using the Java serialization mechanism, which is vulnerable to deserialization attacks.
The exploit also includes a Metasploit module and a Burp extension, which can be used to automate the exploitation process.
The vulnerability affects WebLogic versions 12.2.1.4.0 and earlier, and it is recommended to patch the vulnerability as soon as possible.
The exploit can be invoked by running the Python script with the following command:
`python weblogic_t3.py <host> <port> <payload>`
Where `<host>` is the IP address or hostname of the vulnerable WebLogic server, `<port>` is the port number of the WebLogic server, and `<payload>` is the path to the