Giter VIP home page Giter VIP logo

weblogic-scan's Introduction

weblogic-scan

weblogic 漏洞扫描工具 妄想试图weblogic一把梭
目前检测的功能

  • console 页面探测 & 弱口令扫描
  • uuid页面的SSRF
  • CVE-2017-10271 wls-wsat页面的反序列化
  • CVE-2018-2628 反序列化
  • CNVD-C-2019-48814

后期可以的话还会继续加功能的，主要是一些反序列化的poc真的不好写，我也不咋会..

USE

使用前请先填写config.py中的server参数
推荐配合http://ceye.io之类的工具使用，server格式为http://xxx.ceye.io

使用方式比较简单，目前支持两种模式

1、扫描url.txt中的所有url

python3 weblogic-scan

2、扫描单一的url

python3 weblogic-scan 127.0.0.1:7001

console弱口令和CVE-2018-2628的扫描结果会直接在控制台中输出。

uuid页面的SSRF以及wls-wsat反序列化会在server服务器中留下日志文件。
会在域名前带上受影响机子的地址，这样扫描多个地址的时候方便做区分。

prepare

ENV

  • version: python3
  • expand : requests

config.py

  • timeout: ​ 自定义timeout的时间，包括requests和socket的timeout
  • server(没有默认值，务必填写): 由于一些exp发送后具体有没有成功需要看服务器是否有数据返回 需要一个服务器来接受这种数据，例如http://ceye.io 攻击成功会在dns记录以及http的log部分留下数据

url.txt

支持如下几种格式的url

不填写端口默认端口为80，https起头的默认端口为443

weblogic-scan's People

Contributors

kingkaki avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar

Forkers

sry309 c0010 5up3rc qsdj findlakes aa506 kenanat killvxk whoami-whoami adooo orf53975 anyedt qianniaoge huangyuan666 no0d1es flaray xiaoyaodashao jkwolf hacktfj az0ne qiukkk kaide0521 limuitech flyoverback jerrynotme vismylover n0rth3 f8syw5v 1454325915 wang0098 475763610 xdreamseeker 993286925 ninacumt lhtest429 l3ngd0n lonehand cflive t1r3d jiexixijie startagain2016 yaoxiaodai lin962648 zhangway100 sixiangzhe modulexcite tankvstank icysun 5am3 lyh0210 vegychick huangzccn slowmistio vv4r1ock kelvinben bay1ts nosorry dk47os3r saurabh96216 diannaofengzi anonymouscyberwarrior afwu 52icon comglchen

weblogic-scan's Issues

这个扫描器的结果真的准确吗？

➜ weblogic-scan-master python3 weblogic-scan.py http://10.0.70.149:7002
_ _ _
__ | | | | ___ __ () ___ ___ ___ __ _ _ __
\ \ /\ / / _ \ ' | |/ _ \ / | |/ __|____/ __|/ __/ _ | '
\ V V / / |) | | () | (| | | (______ \ ( (_| | | | |
_/_/ _|.__/||_/ _, ||_| |/__,|| ||
|__/
author: kingkk
version: python3
expand: requests
github: https://github.com/kingkaki/weblogic-scan

[+] uuid_ssrf: 10.0.70.149:7002
[-] console not find: 10.0.70.149:7002
[+] CVE wls-wsat: 10.0.70.149:7002
[-] CVE-2018-2628 not vul: 10.0.70.149:7002

扫描器告诉我这里没有漏洞。

但是我用漏洞验证脚本，结果却是有漏洞：
➜ Desktop python poc.py 10.0.70.149 7002

usage: python cve-2018-2628.py ip port

handshake successful
send request payload successful,recv length:1693
..........
10.0.70.149:7002 is vul CVE-2018-2628

所以到底有还是没有啊。

跪求解答

C:\Users\Thinkpad>C:\Users\Thinkpad\AppData\Local\Programs\Python\Python38\python.exe C:\Users\Thinkpad\Downloads\weblogic-scan-master\weblogic-scan.py 测试域名:7001
�[32m _ _ _
__ | | | | ___ __ () ___ ___ ___ __ _ _ __
\ \ /\ / / _ \ ' | |/ _ \ / | |/ __|____/ __|/ __/ _ | '
\ V V / / |) | | () | (| | | (______ \ ( (_| | | | |
_/_/ _|.__/||_/ _, ||_| |/__,|| ||
|__/

github: https://github.com/kingkaki/weblogic-scan
�[32m
�[33m[-] is busy: 7001:80�[33m

请问这个是什么意思？

uuid_ssrf:

hello kingkaki ,

what it means " [+] uuid_ssrf: xxxxxx.com:xxx " ?

Thanks

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.