CVE-2021-26295 PoC — Apache OFBiz 代码问题漏洞

Source

https://github.com/S0por/CVE-2021-26295-Apache-OFBiz-EXP

Associated Vulnerability

Title:Apache OFBiz 代码问题漏洞 (CVE-2021-26295)
Description:Apache OFBiz是美国阿帕奇（Apache）基金会的一套企业资源计划（ERP）系统。该系统提供了一整套基于Java的Web应用程序组件和工具。 Apache OFBiz prior to 17.12.06 存在安全漏洞，该漏洞源于不安全的反序列化，攻击者可利用该漏洞可以完全控制Apache OFBiz系统。

Description

Apache OFBiz rmi反序列化EXP(CVE-2021-26295)

Readme

# Apache OFBiz rmi反序列化EXP(CVE-2021-26295)

目前仅支持nc弹shell


将ysoserial.jar放置在同目录下，py3运行，根据提示输入漏洞url，你的vps地址和端口

第二次使用建议删除exp.ot

本工具仅用于安全测试，禁止未授权非法攻击站点，否则后果自负。

File Snapshot


 [4.0K]  /data/pocs/46ee7390af2f4959e9046f0dccfcfbd1d2407a38
├── [1.8K]  CVE-2021-26295-Apache-OFBiz-EXP.py
└── [ 314]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!