WebLogic-SSRF_CVE-2014-4210

Weblogic SearchPublicRegistries SSRF(CVE-2014-4210) Exploit Script based on Python3

Usage

optional arguments:
-h, --help        show this help message and exit
-u U        Single Target URL
-uf UF        Read URLs from file
-p P        Only scan specified ports
-sn SN        Only scan specified subnets
-sf SF        Only scan IP in files
--timeout TIMEOUT        Specify the timeout,default 2s
--header HEADER        Specify HTTP request header parameters and values, JSON format
-d        Only detect whether the vulnerability exists
-A        Only scan default Class A subnet
-B        Only scan default Class B subnet
-C        Only scan default Class C subnet

Example

Detect a single URL for vulnerabilities

Detect multiple URLs for vulnerabilities

Detect the common ports open on the specified network segment