
Python-based exploit for CVE-2019-2725 (Oracle WebLogic) providing command execution and webshell upload targeting versions 10.3.6 and 12.1.3.
Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited.
weblogic command echo + webshell upload
Script introduction:
This script is tested on weblogic versions 10.3.6 and 12.1.3, and is written in python3.
10.3.6 uses the jdk7u21 payload
12.1.3 uses the org.slf4j.ext.EventData class for double deserialization
Python dependencies: requests, logzero



Reference: https://mp.weixin.qq.com/s/rI6VGSiQ0SbGWUjQpQ-qfw