Sploitus

Exploit for CVE-2020-14882

gitee Β· 2020-10-29

Exploit Code

MARKDOWN28 lines
## https://sploitus.com/exploit?id=84EF875D-8E2B-56EA-9148-8DDD1FC883CD
This is a Python script designed to exploit the CVE-2020-14882 vulnerability in Oracle WebLogic Server. The script is intended to be used for research purposes only and should not be used for malicious activities.

Here's a breakdown of the script:

**Importing Libraries**

The script starts by importing the `requests` library, which is used for making HTTP requests.

**Banner**

The script then prints a banner, which is a ASCII art representation of a WebLogic Server logo. The banner includes a message indicating that the research was conducted by Jang and the code was written by Base4Sec (@s1kr10s).

**Getting User Input**

The script then prompts the user to input the remote host and port of the target WebLogic Server instance.

**Constructing the URL**

The script constructs the URL of the target WebLogic Server instance by concatenating the host, port, and path.

**Main Loop**

The script enters a main loop where it continuously prompts the user to input a command to be executed on the target system. The command is then used to construct a payload, which is a URL-encoded string that is sent to the target system using a POST request.

**Sending the Payload**

The script sends the payload to the target system using the `requests.request()` function