CVE-2020-14645

This PoC exploits CVE-2020-14645, a deserialization vulnerability in WebLogic, by crafting a malicious serialized object that triggers JNDI injection via an LDAP reference. The payload is sent over T3 protocol to achieve remote code execution.

This repository contains a Python-based exploit for CVE-2020-14645, a vulnerability in Oracle WebLogic Server. The exploit leverages JNDI injection to achieve remote code execution (RCE) by spawning a reverse shell via a crafted payload.

This repository contains a proof-of-concept exploit for CVE-2020-14645, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages JNDI injection via LDAP to achieve remote code execution by sending a malicious T3 protocol payload.

This repository contains a functional exploit for CVE-2022-21445, a Java deserialization vulnerability in Oracle ADF Faces leading to unauthenticated Remote Code Execution. The exploit generates payloads for different attack scenarios (webshell, sleep, DNS callback) and includes detailed setup instructions.

This repository contains a proof-of-concept exploit for CVE-2020-14645, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages JNDI injection via LDAP to achieve remote code execution by sending a malicious serialized payload over the T3/T3S protocol.