Sploitus

Exploit for CVE_2020_2546

CVE-2019-2888CVE-2020-2551CVE-2020-2555CVE-2020-2798CVE-2020-2801CVE-2020-2883CVE-2020-2884CVE-2020-2915CVE-2020-2950

kitploit ¡ 2026-08-25

Exploit Code

MARKDOWN27 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HKTALENT-CVE_2020_2546
Twitter: @Hktalent3135773 ![Tweet](https://img.shields.io/twitter/url/http/Hktalent3135773.svg?style=social) ![Follow on Twitter](https://img.shields.io/twitter/follow/Hktalent3135773.svg?style=social&label=Follow)

# 1、Weblogic RCE exploit

CVE_2020_2546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3

# 2、exploit

  * GIOP + send bind (CVE-2020-2555、CVE-2019-2888、CVE-2019-2888<XXE+SSRF> or others)
  * GIOP + send jta (rmi or others)
  * GIOP + send jta + SSRF
  * T3 + send jta
  * T3 + send jta + SSRF
  * T3 + send XXE
  * T3 + send XXE + SSRF



#### 2.1、rmi server,see

  * don't use org.mozilla.classfile.DefiningClassLoader
  * don't use java -cp $mtx/../tools/ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 1099 Jdk7u21 'whoami' more see: https://github.com/hktalent/CVE-2020-2551



# 3、code