Sploitus

Exploit for CVE-2020-2883

kitploit · 2026-08-26

Exploit Code

MARKDOWN52 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-AL1EX-CVE-2020-2883
# यह क्या है

यह प्रोजेक्ट, जो weblogic_cmd पर आधारित है, CVE-2020-2883 के लिए एक PoC है।

# दो गैजेट

पहला:

root@kitploit:~
    
    
    ObjectInputStream.readObject()
        PriorityQueue.readObject()
            PriorityQueue.heapify()
                PriorityQueue.siftDown()
                    siftDownUsingComparator()
                        com.tangosol.util.comparator.ExtractorComparator.compare()
                            com.tangosol.util.extractor.ChainedExtractor.extract()
                                com.tangosol.util.extractor.ReflectionExtractor().extract()
                                    Method.invoke()
        							.......
                                com.tangosol.util.extractor.ReflectionExtractor().extract()
                                    Method.invoke()
                                    Runtime.exec()                  
    

![gadget1](https://assets.kitploit.com/production/public/readmes/15100/55ac37c2cd4ce4a7544a5a3a1111cc67567e4a1ce9652b7db0f6d535ceab558a.jpg)

दूसरा:

root@kitploit:~
    
    
    ObjectInputStream.readObject()
        PriorityQueue.readObject()
            PriorityQueue.heapify()
                PriorityQueue.siftDown()
                    siftDownUsingComparator()
                        com.tangosol.util.extractor.AbstractExtractor.compare()
                          com.tangosol.util.extractor.MultiExtractor.extract()
                            com.tangosol.util.extractor.ChainedExtractor.extract()
                                com.tangosol.util.extractor.ChainedExtractor.extract()
                                    com.tangosol.util.extractor.ReflectionExtractor().extract()
                                        Method.invoke()
        								.......
                                    com.tangosol.util.extractor.ReflectionExtractor().extract()
                                        Method.invoke()
                                        Runtime.exec()                  
    

![gadget2](https://assets.kitploit.com/production/public/readmes/15100/ec53ab3e5c4eea1ced80cf24124a07e3b62445d64d8e126b1649adb157038e20.jpg)