Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/r4b3rt/cve-2017-10271
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlPayload Development
GitHubr4b3rt/cve-2017-10271

CVE-2017-10271

Weblogic(CVE-2017-10271)

View Repository
117 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

weblogic_wls_wsat_rce

Weblogic wls-wsat component deserialization vulnerability (CVE-2017-10271) exploit script, modified from https://github.com/s3xy/CVE-2017-10271.

  • Command execution with echo output
  • Direct shell upload
  • Tested on Linux with weblogic 10.3.6.0 OK

Usage and Parameters

  • python weblogic_wls_wsat_exp.py -t IP:7001
root@kitploit:~
usage: weblogic_wls_wsat_exp.py [-h] -t TARGET [-c CMD] [-o OUTPUT] [-s SHELL]

optional arguments:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        weblogic ip and port(eg -> IP:7001)
  -c CMD, --cmd CMD     command to execute,default is "id"
  -o OUTPUT, --output OUTPUT
                        output file name,default is output.txt
  -s SHELL, --shell SHELL
                        local jsp file name to upload,and set -o xxx.jsp
Download Tool