CVE-2018-2628 Vulnerability Batch Detection Script

Usage

IP format:

192.168.31.1:443
192.168.31.100:443

• Save it as url.txt in the same directory and run the script.
• Please comment on the output effect yourself!
• Execute like this:

# The program works fine under Deepin, but not under Ubuntu on Win10, so I made changes
# 3 is the timeout in seconds
python weblogic_poc-cve-2018-2628-update.py 3

weblogic_poc-cve-2018-2628-update.py

• 1. Add the tested IPs to the list, output after detection.
• 2. Just use it as is
• 3. Customize the detection timeout for sites without vulnerabilities, instead of directly judging by length (without setting, it will loop indefinitely)

weblogic_poc-cve-2018-2628.py

Notes

• This script is from NSFOCUS, but it can only detect one site at a time, and you have to edit the code each time...
• So I added a batch detection wheel to let it run further.
• After multiple tests, the payload length received by sites without vulnerabilities is 0, so we directly determine vulnerability existence by length. Because if we don't do this, the program will get stuck in a while loop.

Reference: https://github.com/jas502n/CVE-2018-2628