Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
weblogic_wls_wsat_rce — Python exploit script for CVE-2017-10271 targeting Oracle WebLogic Server WLS-WSAT component. Supports command execution with output and direct JSP shell upload for unauthenticated remote compromise. | Kitploit
Tools/GitHubGitHub/cjjduck/weblogic_wls_wsat_rce
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubcjjduck/weblogic_wls_wsat_rce

weblogic_wls_wsat_rce

Python exploit script for CVE-2017-10271 targeting Oracle WebLogic Server WLS-WSAT component. Supports command execution with output and direct JSP shell upload for unauthenticated remote compromise.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
33918 years agoNot yet reviewed
Share

weblogic_wls_wsat_rce

Weblogic wls-wsat component deserialization vulnerability (CVE-2017-10271) exploit script, modified from https://github.com/s3xy/CVE-2017-10271.

  • Command execution with output
  • Directly upload shell
  • Tested OK on Linux Weblogic 10.3.6.0

Usage and Parameters

  • python weblogic_wls_wsat_exp.py -t 172.16.80.131:7001
root@kitploit:~
usage: weblogic_wls_wsat_exp.py [-h] -t TARGET [-c CMD] [-o OUTPUT] [-s SHELL]

optional arguments:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        weblogic ip and port(eg -> 172.16.80.131:7001)
  -c CMD, --cmd CMD     command to execute,default is "id"
  -o OUTPUT, --output OUTPUT
                        output file name,default is output.txt
  -s SHELL, --shell SHELL
                        local jsp file name to upload,and set -o xxx.jsp
Download Tool