qianniaoge/cve-2020-14882_exploit_guiGUI-based exploit tool for CVE-2020-14882 targeting Oracle WebLogic servers. Supports reverse shell payload generation, proxy configuration, and multiple version compatibility for authorized penetration testing.
During a penetration test, I encountered 14882 and couldn't find a usable GUI POC, so I refactored it. I personally prefer GUI-style POCs.
In v1, version 10.3.6 is not usable.
v2 adds support for version 10.3.6. Version 10.3.6 only supports reverse shells; you need to host linux.xml on the web and use nc to listen on your VPS.
v2.1 Fixes the window crash issue.
v2.2 Adds proxy support.
Weblogc_exploit_v1.0 demo:
Weblogc_exploit_v2.0:
Weblogc_exploit_v2.1:
debug: Fix the window crash issue.
Weblogc_exploit_v2.2:
debug: Fix the window crash issue. Added socket and HTTP proxy support. Changed the GUI style.
Go ahead and give it a star!!!
