KimJun1010 / WeblogicTool

WeblogicTool,GUI漏洞利用工具,支持漏洞检测、命令执行、内存马注入、密码解密等(深信服深蓝实验室天威战队强力驱动)
1.56k stars 107 forks source link

error #10

Closed our-cakes closed 6 months ago

our-cakes commented 6 months ago

============检查漏洞:CVE_2020_14882_Unauthorized开始============ [*]出现异常:ConnectException: Connection refused (Connection refused),Cause:java.net.ConnectException: Connection refused (Connection refused) ============检查漏洞:CVE_2020_14882_Unauthorized完成============

KimJun1010 commented 6 months ago

应该是 waf 拦截了

our-cakes commented 6 months ago

应该是 waf 拦截了

我自己的靶场环境,也试过一些在线的靶场环境

KimJun1010 commented 6 months ago

有在线的测试地址吗?

our-cakes commented 6 months ago

有在线的测试地址吗?

稍等,我开一个

our-cakes commented 6 months ago

有在线的测试地址吗?

http://123.58.224.8:42757

our-cakes commented 6 months ago

有在线的测试地址吗?

http://123.58.224.8:42757

14882

KimJun1010 commented 6 months ago

我这边测试没问题呢😂

image
our-cakes commented 6 months ago

啊?我是mac m1环境,用的jdk1.8,不应该啊 ============检查漏洞:CVE_2020_14882_Unauthorized开始============ [*]出现异常:ConnectException: Connection refused (Connection refused),Cause:java.net.ConnectException: Connection refused (Connection refused) ============检查漏洞:CVE_2020_14882_Unauthorized完成============

our-cakes commented 6 months ago

我同事的win环境也有问题

KimJun1010 commented 6 months ago

你用的哪个版本,1.3测试可以的

our-cakes commented 6 months ago

你用的哪个版本,1.3测试可以的

就是1.3

KimJun1010 commented 6 months ago

看看是不是挂了代理问题;换个热点网络;抓包看看

our-cakes commented 6 months ago

看看是不是挂了代理问题;换个热点网络;抓包看看

发现了问题:我直接-jar 打开工具,直接去扫14882,是直接显示拒接连接的,没有发包,但我如果去扫一下2551echo,再扫14882,他就发包了,然后就扫出来了,大佬你换过其他环境来测试吗,我好几个同事pc都是和我一样的问题

KimJun1010 commented 6 months ago

我也是命令行启动,直接扫14882,但是结果正常。。。 java version "1.8.0_181"

our-cakes commented 6 months ago

我也是命令行启动,直接扫14882,但是结果正常。。。 java version "1.8.0_181"

cake@MacBook-Air weblogic-exp % java -version java version "1.8.0_371" Java(TM) SE Runtime Environment (build 1.8.0_371-b11) Java HotSpot(TM) 64-Bit Server VM (build 25.371-b11, mixed mode) 我麻了

KimJun1010 commented 6 months ago

可能是371版本问题,换个低一点的181版本试试看

our-cakes commented 6 months ago

181版

大佬啥系统

KimJun1010 commented 6 months ago

181版

大佬啥系统

java version "1.8.0_181" Java(TM) SE Runtime Environment (build 1.8.0_181-b13) 。。。