OFBiz-Attack

A Tool For CVE-2023-49070/CVE-2023-51467 Attack

vulhub/ofbiz:18.12.09

Start

java -jar OFBiz-Attack.jar

There are three modules:

Vulnerability Detection

Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation. Only HTTPS requests are supported. Speed depends on Web server performance.

After verification, do not modify the URL; subsequent modules will obtain the URL from this field.
Command Execution

Vulnerability verification must be completed before use. Uses CVE-2023-51467 to execute commands, which also facilitates output display.

If execution fails, it returns the message "Not executed for security reason".

Some commands may fail because (possibly because) of blacklist settings in the security.properties file.

However, reverse shell execution is still possible. If this module does not provide a good experience, please move to the next module.
Inject Memory Shell

⚠️Use with caution; irreversible damage.

Vulnerability verification must be completed before use. Uses CVE-2023-49070 deserialization to inject a memory shell. This module supports injecting CMD/Behinder memory shells, but in principle only one type can be injected.

Connect to Behinder using the default password; do not forget the trailing /.

Both memory shells are injected into the Filter of /webtool/*.

⚠️This tool is for learning and communication only. Do not use it for illegal purposes.

If the modules have given you a bad experience, I sincerely apologize. Please provide suggestions for improvement. Thank you for using it.🙏