weblogic_2019_2725_wls_batch

weblogic CVE-2019-2725 vulnerability Exp, targeting the wls-wsat component vulnerability. It uses three exploits for batch detection. At the time of writing, I didn't think too much about it — just verifying the existence of the vulnerability was enough. So the script's function is to output the result of the whoami command on vulnerable machines.

Usage

python3 weblogic_batch_V1.0.py

(Put targets in target.txt, one per line.)

Example

Single verification