Y4er/CVE-2020-2883

Stars
178
Rank 214,989 (Top 5 %)
Language
Java
Created over 4 years ago
Updated over 4 years ago

Y4er/CVE-2020-2883

Y4er

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Weblogic coherence.jar RCE

CVE-2020-2883

先克隆框架

git clone https://github.com/Y4er/CVE-2020-2555

然后将 CVE_2020_2883.java 放到 src/com/supeream/CVE_2020_2883.java 目录下

导入idea运行 CVE_2020_2883.java RCE!

截图

ysoserial

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

WebLogic-Shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

dotnet-deserialization

dotnet 反序列化学习笔记

CVE-2020-2551

Weblogic IIOP CVE-2020-2551

fastjson-bypass-autotype-1.2.68

fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.

CVE-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

yaml-payload

Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg

openam-CVE-2021-35464

openam-CVE-2021-35464 tomcat 执行命令回显

CVE-2020-14645

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

CVE-2020-14756

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell

CVE-2021-35215

SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE

Y4er