Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/herantong/cve-2018-2628
Payload GenerationVulnerability AnalysisExploitationShellcodeWeb Application ExploitationPenetration Testing
GitHubherantong/cve-2018-2628

CVE-2018-2628

Python-based exploit for CVE-2018-2628 targeting Oracle WebLogic Server, providing vulnerability detection and remote shell access via JSP payload upload.

View Repository
118 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

weblogic getshell

Optimized based on scripts from predecessors to make the code run in Python 3.
Mainly on Windows.

Reference Links

https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.zh-cn.md

https://github.com/0xMJ/CVE-2018-2628

weblogic getshell

Test for Vulnerability

1

python pocweblogic.py your-ip

Upload getshell

ad653cbb02fe18880494625b8a439727_MD5

"Weblogic GetShell CVE-2018-2628.exe" your-ip port

Exploitation

62d047a0c623f51d77400f6d16c7fa64_MD5

Python getshell.py

Set shell : http://your-ip:port/bea_wls_internal/wlscmd.jsp

Troubleshooting 1.
If you see:

a378b2cae81aea5343da2287fc26e8c7

This is because the requests module is not installed in your Python environment.
Simply run the following command in your terminal:

root@kitploit:~
pip install requests

Make sure to prepend python3 -m to the command if needed, e.g.:

python3 -m pip install requests

Download Tool