CVE-2018-2628-detect | Kitploit

CVE-2018-2628 Vulnerability Batch Detection Script

Usage

IP format:

192.168.31.1:443
192.168.31.100:443

Name it url.txt and save it in the same directory, then run the script.
Please comment out the output display yourself!
Run it like this:

# 程序在Deepin下没问题，但是到了win10下的Ubuntu就不行了，改了一下
# 3是超时时间，单位秒
python weblogic_poc-cve-2018-2628-update.py 3

weblogic_poc-cve-2018-2628-update.py

1. Add the test IPs to the list and output them after detection completes.
1. Just make do with it.
1. Customize the detection timeout for sites without the vulnerability, instead of directly judging by length (if not set, it will stay stuck in a while loop).

weblogic_poc-cve-2018-2628.py

Notes

This script is produced by NSFOCUS, but it can only detect one site at a time, and you have to edit the code every time...
So I added a batch detection wheel to it so it can run further.
After multiple tests, sites without the vulnerability receive payload requests with a length of 0, so the vulnerability is determined directly by length. If this weren't done, the program would get stuck in a while loop.

Reference: https://github.com/jas502n/CVE-2018-2628