CVE-2026-21962 Java GUI Exploit Tool

Java GUI version of the Oracle WebLogic Server Proxy Plug-In RCE (Remote Code Execution) vulnerability exploitation tool.

Project Structure

java-version/
├── pom.xml              # Maven project configuration file
├── README.md            # Project documentation
├── run.bat              # Windows startup script
└── src/
    └── main/
        └── java/
            └── com/
                └── ashwesker/
                    └── cve202621962/
                        ├── Main.java                    # Program entry point
                        ├── core/
                        │   └── Exploit.java             # Core exploit logic
                        ├── gui/
                        │   └── MainWindow.java          # GUI main window
                        └── util/
                            └── HttpClient.java          # HTTP request utility

GUI Layout

The program window contains the following areas:

1. Input Parameters Area (top)

   • Target URL text area: supports multi-line input, one target address per line
   • Command execution text field: enter the command to execute

2. Button Area (middle)

   • Execute Exploit button: starts the exploit test
   • Clear Log button: clears the log and output areas

3. Execution Log Area (bottom left)

   • Displays the test process and status information in real time
   • Uses a gray background for easy distinction

4. Command Output Area (bottom right)

   • Displays command execution results
   • Multiple targets are separated by equals signs
   • Uses a light yellow background for easy distinction

Features

• GUI Interface: Graphical user interface built with Swing
• Multi-target Support: Supports testing multiple target systems simultaneously, one URL per line
• Maven Management: Uses Maven for dependency management and building
• HTTP Client: HTTP requests implemented with OkHttp
• Multi-path Testing: Automatically tests multiple possible vulnerability paths
• Real-time Logging: Displays the execution process and results in real time
• Command Output: Displays command execution results, automatically separated between multiple targets
• Asynchronous Execution: Uses SwingWorker for asynchronous execution without blocking the UI

Dependencies

• OkHttp 4.12.0 (HTTP client)
• Java 11+

Compilation and Execution

Compiling with Maven

cd java-version
mvn clean compile

Packaging as JAR

mvn clean package

The packaged JAR file is located at: target/cve-2026-21962-1.0.0.jar

Running the Program

Method 1: Using the Startup Script (recommended)

Double-click the run.bat file to start the program

Method 2: Running with Maven

cd java-version
mvn exec:java -Dexec.mainClass="com.ashwesker.cve202621962.Main"

Method 3: Running the JAR Directly

java -jar target/cve-2026-21962-1.0.0.jar

Method 4: Running with the Java Command (requires compilation first)

cd java-version
mvn clean compile
java -cp "target/classes;[dependency jar path]" com.ashwesker.cve202621962.Main

Usage Examples

Example 1: Single-target Test

Target URL:

http://192.168.1.100:7001

Command to execute:

whoami

Example 2: Multi-target Batch Test

Target URL:

http://192.168.1.100:7001
http://192.168.1.101:7001
http://192.168.1.102:7001
https://weblogic.example.com:4443

Command to execute:

id

Example output:

[*] Starting vulnerability test...
[*] Target URL: http://192.168.1.100:7001
[*] Executing command: id
[*] Testing path: http://192.168.1.100:7001/weblogic//weblogic/..;/bea_wls_internal/ProxyServlet
[+] Success! Status code: 200
[+] Command executed successfully!
uid=0(root) gid=0(root) groups=0(root)
------------------------------------------------------------
================================================================================
[*] Starting vulnerability test...
[*] Target URL: http://192.168.1.101:7001
[*] Executing command: id
[*] Testing path: http://192.168.1.101:7001/weblogic//weblogic/..;/bea_wls_internal/ProxyServlet
[+] Success! Status code: 200
[+] Command executed successfully!
uid=0(root) gid=0(root) groups=0(root)
------------------------------------------------------------

Usage Instructions

Single-target Test

1. After starting the program, enter the target server address in the "Target URL" text area

   • For example: http://target:7001 or https://oracle-server:4443

2. Enter the command to execute in the "Command to Execute" field

   • For example: whoami, id, powershell -c ..., etc.

3. Click the "Execute Exploit" button to start the test

4. Check the "Execution Log" below to understand the test process

5. Check the "Command Output" below to get the command execution results

Multi-target Batch Test

1. Enter multiple target addresses in the "Target URL" text area, one per line

   http://target1:7001
   http://target2:7001
   https://target3:4443
   

2. Enter the command to execute in the "Command to Execute" field

3. Click the "Execute Exploit" button to start the batch test

4. The program will test each target in sequence, and the output results of different targets are separated by ================ (80 equals signs)

5. Check the "Execution Log" below to understand the test process for each target

6. Check the "Command Output" below to get the command execution results for all targets

Other Operations

• Click the "Clear Log" button to clear the log and output areas
• The "Execute Exploit" button is disabled during execution and automatically re-enabled after completion
• The program supports window resizing, and all components automatically adapt to the window size

Vulnerability Details

• CVE ID: CVE-2026-21962
• Affected Versions: Oracle HTTP Server / WebLogic Proxy Plug-In < patched version (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0)
• Vulnerability Type: Remote Code Execution (RCE)
• Authentication Requirement: No authentication required

Test Paths

The program automatically tests the following paths:

• /weblogic/
• /wl_proxy/
• /bea_wls_internal/
• /_proxy/
• /proxy/

Important Notes

⚠️ Warning: This tool is intended for authorized security testing only. Using this tool to attack systems without authorization is illegal.

• Please ensure you have explicit authorization before testing target systems
• For security research and penetration testing only
• Please comply with local laws and regulations
• The author is not responsible for any misuse

Technical Implementation

• GUI Framework: Java Swing
• HTTP Client: OkHttp 4.12.0
• Build Tool: Maven
• Java Version: Java 11+
• Layout Management: BorderLayout, GridBagLayout, JSplitPane
• Multithreading: SwingWorker for asynchronous execution
• SSL Support: Ignores certificate validation, supports HTTPS

Core Component Description

1. Main.java

   • Program entry point, sets the system look and feel and launches the GUI

2. Exploit.java

   • Implements the core exploit logic
   • Base64-encoded payload
   • Tests multiple vulnerability paths
   • Communicates with the GUI via callback interface

3. MainWindow.java

   • GUI main window implementation
   • Handles user input and button events
   • Displays execution logs and command output
   • Supports multi-target batch testing

4. HttpClient.java

   • Wraps HTTP request functionality
   • Supports GET/POST requests
   • Ignores SSL certificate validation
   • 12-second timeout setting

License

This project is for educational and security research purposes only.