Additional information about CVE-2018-2628 can be found on my GitBook, here.
Additional information about CVE-2019-2725 can be found on my GitBook, here.
Deserialization through wls-wsat.war
and wls9_async_response.war
.
Payload burp-req01.txt
tested successfully against VulnHubs WebLogic 10.3.6.0-2017 container.
Additional information about CVE-2023-21839 can be found on my GitBook, here.
Additional information about CVE-2024-20931 can be found on my GitBook, here.
Additional information about CVE-2024-21006 can be found on my GitBook, here.