2018-11-06 22:05:22 +08:00
|
|
|
# -*- coding: utf-8 -*-
|
|
|
|
|
import weblogic.CVE_2017_10271
|
2018-12-03 20:21:12 +08:00
|
|
|
import weblogic.ssrf
|
2018-12-08 19:49:45 +08:00
|
|
|
import weblogic.weblogic_weakpasswd
|
2019-04-26 19:52:06 +08:00
|
|
|
import weblogic.CNVD_C_2019_48814
|
2019-01-26 11:06:08 +08:00
|
|
|
import os
|
2019-08-06 22:32:43 +08:00
|
|
|
import re
|
2018-11-06 22:05:22 +08:00
|
|
|
|
|
|
|
|
def exec(URL):
|
2019-04-26 19:52:06 +08:00
|
|
|
weblogic.CNVD_C_2019_48814.attack(URL)
|
2018-11-06 22:05:22 +08:00
|
|
|
weblogic.CVE_2017_10271.attack(URL)
|
2018-12-03 20:21:12 +08:00
|
|
|
weblogic.ssrf.attack(URL)
|
2018-12-08 19:49:45 +08:00
|
|
|
weblogic.weblogic_weakpasswd.attack(URL)
|
2018-11-06 22:05:22 +08:00
|
|
|
|
2019-01-26 11:06:08 +08:00
|
|
|
print('[+]开始检测-Weblogic-CVE-2018-2628。[+]')
|
|
|
|
|
#切换工作路径
|
|
|
|
|
os.chdir(os.path.realpath(__file__)[:38])
|
2019-08-06 22:32:43 +08:00
|
|
|
url = re.findall('//(.*?):', URL, flags=0)[0]
|
|
|
|
|
ip = re.findall(r':(.*?)\Z', URL[6:], flags=0)[0]
|
|
|
|
|
os.system(f"py -2 CVE_2018_2628.py {url} {ip}")
|
2019-01-26 11:06:08 +08:00
|
|
|
print('[+]检测结束-Weblogic-CVE-2018-2628。[+]')
|
2018-11-06 22:05:22 +08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
if __name__ == "__main__":
|
|
|
|
|
exec()
|
