Y4er/CVE-2020-2883 Y4er/CVE-2020-2883

  • Stars
    star
    178
  • Rank 214,144 (Top 5 %)
  • Language
    Java
  • Created over 4 years ago
  • Updated over 4 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
Y4er/CVE-2020-2883
github

Y4er

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Weblogic coherence.jar RCE

CVE-2020-2883

先克隆框架

git clone https://github.com/Y4er/CVE-2020-2555

然后将 CVE_2020_2883.java 放到 src/com/supeream/CVE_2020_2883.java 目录下

导入idea运行 CVE_2020_2883.java RCE!

截图

CVE_2020_2883.gif

More Repositories

1

ysoserial

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。
Java
609
star
2

WebLogic-Shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
Java
528
star
3

dotnet-deserialization

dotnet 反序列化学习笔记
412
star
4

CVE-2020-2551

Weblogic IIOP CVE-2020-2551
Java
333
star
5

fastjson-bypass-autotype-1.2.68

fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
Java
223
star
6

CVE-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE
Java
177
star
7

yaml-payload

Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
Java
128
star
8

openam-CVE-2021-35464

openam-CVE-2021-35464 tomcat 执行命令回显
Java
87
star
9

CVE-2020-14645

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()
Java
79
star
10

CVE-2020-14756

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar
Python
79
star
11

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell
Java
67
star
12

CVE-2021-35215

SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE
47
star
13

Y4er

README
1
star