W10-2WebLogic-RCE
fofa语法:
(body=“Welcome to WebLogic Server”) || (title==“Error 404–Not Found”) || (((body=“BEA WebLogic Server” || server=“Weblogic” || body=“content="WebLogic Server” || body=“Welcome to Weblogic Application” || body=“BEA WebLogic Server”) && header!=“couchdb” && header!=“boa” && header!=“RouterOS” && header!=“X-Generator: Drupal”) || (banner=“Weblogic” && banner!=“couchdb” && banner!=“drupal” && banner!=” Apache,Tomcat,Jboss” && banner!=“ReeCam IP Camera” && banner!=“Blog Comments”)) || (port=“7001” && protocol==“weblogic”)
漏洞复现:
payload:
https://pan.quark.cn/s/268df0599a99