CVE-2016-0638

This repository contains a WebLogic vulnerability scanner that checks for multiple CVEs, including CVE-2018-2628. It is a Python-based tool designed to detect vulnerabilities in Oracle WebLogic Server by sending crafted requests and analyzing responses.

This repository contains proof-of-concept exploits for multiple WebLogic vulnerabilities, including CVE-2015-4852, which leverages Java deserialization via Apache Commons Collections to achieve remote code execution. The PoC generates a serialized payload that, when deserialized, executes arbitrary commands.

This repository contains a functional exploit for CVE-2016-0638, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages the T3 protocol to achieve remote code execution (RCE) by installing an RMI backdoor and executing arbitrary commands.