Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/dwisiswant0/cve-2020-9496
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubdwisiswant0/cve-2020-9496

CVE-2020-9496

View Repository
336 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-9496

Set-up Vulnerable Environment

root@kitploit:~
▶ wget http://archive.apache.org/dist/ofbiz/apache-ofbiz-17.12.01.zip
▶ unzip apache-ofbiz-17.12.01.zip
▶ cd apache-ofbiz-17.12.01
▶ sh gradle/init-gradle-wrapper.sh
▶ ./gradlew cleanAll loadDefault
▶ ./gradlew "ofbiz --load-data readers=seed,seed-initial,ext"
▶ ./gradlew ofbiz # Start OFBiz

Open a browser and go to https://localhost:8443.

The default administrative account is username: admin password: ofbiz.

Proof of Concept

Using nuclei

  • https://github.com/projectdiscovery/nuclei-templates/pull/312
root@kitploit:~
> echo "https://localhost:8443" | nuclei -t cves/CVE-2020-9496.yaml
Download Tool