Sploitus

Exploit for Deserialization of Untrusted Data in Liferay Liferay Portal

githubexploit Β· 2021-01-14

Exploit Code

README11 lines
## https://sploitus.com/exploit?id=E1320DCA-BE6A-566A-8074-6EDFB48DBB3F
# CVE-2020-7961
Exploit script for CVE-2020-7961
Unauthenticated Remote code execution via JSONWS

# References & inspirations

- original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html
- synacktiv blogpost : https://www.synacktiv.com/publications/how-to-exploit-liferay-cve-2020-7961-quick-journey-to-poc.html
- code base #1 : https://github.com/random-robbie/liferay-pwn
- code base #2 : https://github.com/mzer0one/CVE-2020-7961-POC