CVE-2020-2555

This repository contains a functional exploit for CVE-2020-2555, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages the ReflectionExtractor gadget chain to achieve remote code execution (RCE) via the T3 protocol.

This repository contains a working exploit for CVE-2020-2555, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages a crafted payload to achieve remote code execution (RCE) via the T3 protocol.

This PoC generates a serialized payload exploiting CVE-2020-2555, a deserialization vulnerability in Oracle Coherence. It chains extractors to execute arbitrary commands (e.g., 'calc.exe') via reflection during deserialization.

The repository contains only a README.md with placeholder text and no functional exploit code or technical details. It appears to be an incomplete or abandoned proof-of-concept for CVE-2020-2555.

This repository contains a Python-based exploit for CVE-2020-2555, a deserialization vulnerability in Oracle WebLogic Server. The exploit sends a crafted T3 protocol payload to achieve remote code execution (RCE) by leveraging insecure deserialization.

This repository contains functional exploit code for CVE-2020-2555, demonstrating Java deserialization vulnerabilities in WebLogic. It includes detailed examples of serialization/deserialization, reflection, and gadget chains (e.g., CommonsCollections2/5) to achieve RCE.

This exploit leverages CVE-2020-2555 to achieve remote code execution on Oracle WebLogic Server by sending a crafted T3 protocol payload. It reads an external payload file and embeds it into the exploit traffic.

This Metasploit module exploits CVE-2020-2555, a Java deserialization vulnerability in Oracle WebLogic Server. It sends a serialized BadAttributeValueExpException object over the T3 protocol to achieve unauthenticated remote code execution.

This Metasploit module exploits a Java deserialization vulnerability in Oracle WebLogic Server (CVE-2020-2555) by sending a crafted BadAttributeValueExpException object over the T3 protocol, leading to unauthenticated remote code execution.

This repository contains a Python-based scanner for detecting multiple WebLogic vulnerabilities, including CVE-2020-2555. It checks for the presence of vulnerabilities but does not exploit them.