Sploitus

Exploit for CVE-2019-2890

kitploit · 2026-08-25

Exploit Code

MARKDOWN33 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CVE-2019-2890
# CVE-2019-2890 WebLogic 逆シリアライズRCE脆弱性

![](https://assets.kitploit.com/production/public/readmes/27348/28024015f97f8476880813fa940b90ebda880f10a6aa014cb82a9b515ae789c9.gif)

## 0x01 SerializedSystemIni.dat をダウンロード

` /root/Oracle/Middleware/user_projects/domains/base_domain/security`

root@kitploit:~
    
    
    root@159475444bab:~/Oracle/Middleware/user_projects/domains/base_domain/security# 
    
    md5sum SerializedSystemIni.dat
    
    a50f1784f1f5b12cccb8b231d6b36223  SerializedSystemIni.dat
    
    

## 0x02 security を作成

![](https://assets.kitploit.com/production/public/readmes/27348/c37acbdbf7ea0f2c3987ca66fa1df717d13df360a5496a99c2ef4183d42586be.png)

root@kitploit:~
    
    
    ale@Pentest  ~/Pentester/CVE-2019-2890/security  md5sum SerializedSystemIni.dat
    
    a50f1784f1f5b12cccb8b231d6b36223  SerializedSystemIni.dat
    

## 0x03 Java Rmi を実行