Ysoserial Cve 2018 2628 Versions Save

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch

v0.1

6 years ago

1. Commit two ways for bypassing Oracle WebLogic CVE-2018-2628 Patch

  • JRMPClient2.class (By using java.rmi.activation.Activator)
  • JRMPClient3.class (Wrap java.rmi.registry.Registry in weblogic.jms.common.StreamMessageImpl)