yumusb/cve-2021-26295Proof-of-concept exploit for CVE-2021-26295 (Apache OFBiz RCE) using DNSlog for out-of-band vulnerability verification. Includes command execution interface and ysoserial payload generation.
Vulnerability verification for CVE-2021-26295 using DNSlog.
poc: Place the target in target.txt and run python poc.py. (JDK environment must be <12, otherwise ysoserial cannot generate the payload properly)
exp: python exp.py https://baidu.com then enter the command execution interface (no echo)
For learning and communication only, do not use for other purposes.
