Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
OAMBuster — Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879) | Kitploit
Tools/GitHubGitHub/redtimmy/oambuster
Vulnerability AnalysisExploitationWeb Application ExploitationCryptographyPenetration Testing
GitHubredtimmy/oambuster

OAMBuster

Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)

View Repository
2497 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

OAMBuster

Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)

Authors

Red Timmy (Marco Ortisi, Stefan Broeder, Ahmad Mahfouz)

Description

This multithreaded exploit was developed to greatly increase the speed of the attack as compared to the single threaded version. For more information about the technical details of the attack, see this blog post by SEC Consult:

https://sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/

Screenshot of OAMBuster

The first two stages will quickly verify whether the website is vulnerable to the attack. Stage 3 will launch the multithreaded Padding Oracle attack.

More information

Please adjust the valid_padding() function to catch the error that is returned from a padding failure in your environment.

For more information about the exploit and our trainings on advanced Java attacks, see RedTimmy.com

Download Tool