Sploitus

Exploit for Missing Authentication for Critical Function in Oracle Weblogic Server CVE-2017-10271

gitee · 2019-05-08

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=A73B221A-DCD7-5CE6-B608-B96E42D665EB
PoC exploit for CVE-2017-10271, an RCE vulnerability in Oracle WebLogic. The exploit targets the _async/AsyncResponseService endpoint and uses a SOAP request to inject malicious code. The payload is a Java XMLDecoder that creates a ProcessBuilder to execute a bash shell with a reverse shell payload. The exploit is invoked by running the script with the URL, IP, and port as arguments. The expected impact is remote code execution, and the observable artifact is a reverse shell connection to the attacker's machine.