Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Java漏洞学习笔记 Deserialization Vulnerability

Getting started with java code auditing 代码审计入门的小项目

for mass exploiting

适用于weblogic和Tomcat的无文件的内存马(memshell)

WebLogic Kubernetes Operator

Free universal JMS client

WebLogic Deploy Tooling

WebLogic vulnerability exploration from beginner to expert.

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch

WebLogic Monitoring Exporter exposes metrics and monitoring data through REST APIs for consumption by other tools (e.g. Prometheus)

Codehaus Cargo source code

WebLogic Image Tool

A WebLogic Console that connects remotely using the WebLogic Management REST API

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

CVE-2021-2109 && Weblogic Server RCE via JNDI

Export server logs from WebLogic Server in JSON format to Elasticsearch.

An Ansible playbook to configure a CentOS/RHEL/Oracle Linux 7 server with Oracle Fusion Middleware 12.2.1.3

weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory

An example of a spring boot application that can be deployed to a legacy weblogic server which uses servlet 2.5 api