{"id":13838599,"url":"https://github.com/0xn0ne/weblogicScanner","last_synced_at":"2025-07-10T23:31:42.517Z","repository":{"id":37419981,"uuid":"233997916","full_name":"0xn0ne/weblogicScanner","owner":"0xn0ne","description":"weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883","archived":false,"fork":false,"pushed_at":"2023-11-24T09:21:56.000Z","size":325,"stargazers_count":2007,"open_issues_count":4,"forks_count":340,"subscribers_count":37,"default_branch":"master","last_synced_at":"2024-11-05T04:02:28.392Z","etag":null,"topics":["cve-2016-0638","cve-2016-3510","cve-2017-10271","cve-2017-3248","cve-2018-2893","cve-2018-2894","cve-2018-3191","cve-2018-3245","cve-2018-3252","cve-2019-2618","cve-2019-2725","cve-2019-2729","cve-2019-2888","cve-2019-2890","cve-2020-14750","cve-2020-14882","cve-2020-14883","cve-2020-2551","cve-2020-2555","cve-2020-2883"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0xn0ne.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-01-15T04:26:29.000Z","updated_at":"2024-11-05T01:11:44.000Z","dependencies_parsed_at":"2024-10-15T09:40:51.015Z","dependency_job_id":null,"html_url":"https://github.com/0xn0ne/weblogicScanner","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xn0ne%2FweblogicScanner","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xn0ne%2FweblogicScanner/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xn0ne%2FweblogicScanner/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xn0ne%2FweblogicScanner/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0xn0ne","download_url":"https://codeload.github.com/0xn0ne/weblogicScanner/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225663561,"owners_count":17504435,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve-2016-0638","cve-2016-3510","cve-2017-10271","cve-2017-3248","cve-2018-2893","cve-2018-2894","cve-2018-3191","cve-2018-3245","cve-2018-3252","cve-2019-2618","cve-2019-2725","cve-2019-2729","cve-2019-2888","cve-2019-2890","cve-2020-14750","cve-2020-14882","cve-2020-14883","cve-2020-2551","cve-2020-2555","cve-2020-2883"],"created_at":"2024-08-04T16:00:23.563Z","updated_at":"2024-11-21T02:30:41.503Z","avatar_url":"https://github.com/0xn0ne.png","language":"Python","funding_links":[],"categories":["Python","Python (1887)","漏洞扫描"],"sub_categories":["weblogicScanner"],"readme":"源工具链接：https://github.com/rabbitmask/WeblogicScan\n\n# weblogicScaner\n\n简体中文 | [English](./README_EN.md)\n\n截至 2020 年 11 月 27 日，weblogic 漏洞扫描工具。若存在未记录且已公开 POC 的漏洞，欢迎提交 issue。\n\n原作者已经收集得比较完整了，在这里做了部分的 bug 修复，部分脚本 POC 未生效，配置错误等问题。之前查了一下发现部分 POC 无法使用。在这个项目里面对脚本做了一些修改，提高准确率。\n\n**注意**：部分漏洞由于稳定性原因需要多次测试才可验证\n\n目前可检测漏洞编号有（部分非原理检测，需手动验证）：\n\n+ weblogic administrator console\n+ CVE-2014-4210\n+ CVE-2016-0638\n+ CVE-2016-3510\n+ CVE-2017-3248\n+ CVE-2017-3506\n+ CVE-2017-10271\n+ CVE-2018-2628\n+ CVE-2018-2893\n+ CVE-2018-2894\n+ CVE-2018-3191\n+ CVE-2018-3245\n+ CVE-2018-3252\n+ CVE-2019-2618\n+ CVE-2019-2725\n+ CVE-2019-2729\n+ CVE-2019-2890\n+ CVE-2020-2551\n+ CVE-2020-14750\n+ CVE-2020-14882\n+ CVE-2020-14883\n\n# 快速开始\n\n### 依赖\n\n+ python \u003e= 3.6\n\n进入项目目录，使用以下命令安装依赖库\n\n```\n$ pip3 install requests\n```\n\n### 使用说明\n\n```\nusage: ws.py [-h] -t TARGETS [TARGETS ...] -v VULNERABILITY\n             [VULNERABILITY ...] [-o OUTPUT]\n\noptional arguments:\n  -h, --help            帮助信息\n  -t TARGETS [TARGETS ...], --targets TARGETS [TARGETS ...]\n                        直接填入目标或文件列表（默认使用端口7001）. 例子：\n                        127.0.0.1:7001\n  -v VULNERABILITY [VULNERABILITY ...], --vulnerability VULNERABILITY [VULNERABILITY ...]\n                        漏洞名称或CVE编号，例子：\"weblogic administrator console\"\n  -o OUTPUT, --output OUTPUT\n                        输出 json 结果的路径。默认不输出结果\n  -s, --ssl             强制使用 https 协议请求\n```\n\n# 结果样例\n\n```\n(venv) ~/weblogicScanner$ python ws.py -t 192.168.124.129\n[23:03:04][INFO] [*][Weblogic Console][192.168.56.129:7001] Start...\n[23:03:04][INFO] [+][Weblogic Console][192.168.56.129:7001] Found module!\n[23:03:04][INFO] [*][Weblogic Console][192.168.56.129:7001] Please verify manually!\n[23:03:04][INFO] [*][CVE-2014-4210][192.168.56.129:7001] Start...\n[23:03:04][INFO] [-][CVE-2014-4210][192.168.56.129:7001] Not found.\n[23:03:04][INFO] [*][CVE-2016-0638][192.168.56.129:7001] Start...\n[23:03:06][INFO] [-][CVE-2016-0638][192.168.56.129:7001] Not vulnerability.\n[23:03:06][INFO] [*][CVE-2016-3510][192.168.56.129:7001] Start...\n[23:03:08][INFO] [-][CVE-2016-3510][192.168.56.129:7001] Not vulnerability.\n[23:03:08][INFO] [*][CVE-2017-3248][192.168.56.129:7001] Start...\n[23:03:10][INFO] [-][CVE-2017-3248][192.168.56.129:7001] Not vulnerability.\n[23:03:10][INFO] [*][CVE-2017-3506][192.168.56.129:7001] Start...\n[23:03:10][INFO] [-][CVE-2017-3506][192.168.56.129:7001] Not vulnerability.\n[23:03:10][INFO] [*][CVE-2017-10271][192.168.56.129:7001] Start...\n[23:03:10][INFO] [-][CVE-2017-10271][192.168.56.129:7001] Not vulnerability.\n[23:03:10][INFO] [*][CVE-2018-2628][192.168.56.129:7001] Start...\n[23:03:14][INFO] [+][CVE-2018-2628][192.168.56.129:7001] Exists vulnerability!\n[23:03:14][INFO] [*][CVE-2018-2893][192.168.56.129:7001] Start...\n[23:03:18][INFO] [+][CVE-2018-2893][192.168.56.129:7001] Exists vulnerability!\n[23:03:18][INFO] [*][CVE-2018-2894][192.168.56.129:7001] Start...\n[23:03:19][INFO] [+][CVE-2018-2894][192.168.56.129:7001] Found module!\n[23:03:19][INFO] [*][CVE-2018-2894][192.168.56.129:7001] Please verify manually!\n[23:03:19][INFO] [*][CVE-2018-3191][192.168.56.129:7001] Start...\n[23:03:23][INFO] [+][CVE-2018-3191][192.168.56.129:7001] Exists vulnerability!\n[23:03:23][INFO] [*][CVE-2018-3245][192.168.56.129:7001] Start...\n[23:03:29][INFO] [-][CVE-2018-3245][192.168.56.129:7001] Not vulnerability.\n[23:03:29][INFO] [*][CVE-2018-3252][192.168.56.129:7001] Start...\n[23:03:36][INFO] [+][CVE-2018-3252][192.168.56.129:7001] Found module!\n[23:03:36][INFO] [*][CVE-2018-3252][192.168.56.129:7001] Please verify manually!\n[23:03:36][INFO] [*][CVE-2019-2618][192.168.56.129:7001] Start...\n[23:03:36][INFO] [+][CVE-2019-2618][192.168.56.129:7001] Found module!\n[23:03:36][INFO] [*][CVE-2019-2618][192.168.56.129:7001] Please verify manually!\n[23:03:36][INFO] [*][CVE-2019-2725][192.168.56.129:7001] Start...\n[23:03:46][INFO] [-][CVE-2019-2725][192.168.56.129:7001] Not vulnerability.\n[23:03:46][INFO] [*][CVE-2019-2729][192.168.56.129:7001] Start...\n[23:03:54][INFO] [-][CVE-2019-2729][192.168.56.129:7001] Not vulnerability.\n[23:03:54][INFO] [*][CVE-2019-2888][192.168.56.129:7001] Start...\n[23:03:56][INFO] [+][CVE-2019-2888][192.168.56.129:7001] Found module!\n[23:03:56][INFO] [*][CVE-2019-2888][192.168.56.129:7001] Please verify manually!\n[23:03:56][INFO] [*][CVE-2019-2890][192.168.56.129:7001] Start...\n[23:03:58][INFO] [-][CVE-2019-2890][192.168.56.129:7001] Not vulnerability.\n[23:03:58][INFO] [*][CVE-2020-2551][192.168.56.129:7001] Start...\n[23:03:58][INFO] [+][CVE-2020-2551][192.168.56.129:7001] Found module!\n[23:03:58][INFO] [*][CVE-2020-2551][192.168.56.129:7001] Please verify manually!\n[23:03:58][INFO] [*][CVE-2020-2555][192.168.56.129:7001] Start...\n[23:04:02][INFO] [+][CVE-2020-2555][192.168.56.129:7001] Exists vulnerability!\n[23:04:02][INFO] [*][CVE-2020-2883][192.168.56.129:7001] Start...\n[23:04:06][INFO] [+][CVE-2020-2883][192.168.56.129:7001] Exists vulnerability!\n[23:04:06][INFO] [*][CVE-2020-14882][192.168.56.129:7001] Start...\n[23:04:23][INFO] [-][CVE-2020-14882][192.168.56.129:7001] Not vulnerability.\n[23:04:23][INFO] [*][CVE-2020-14883][192.168.56.129:7001] Start...\n[23:04:23][INFO] [+][CVE-2020-14883][192.168.56.129:7001] Exists vulnerability!\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xn0ne%2FweblogicScanner","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0xn0ne%2FweblogicScanner","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xn0ne%2FweblogicScanner/lists"}