القائمة
Oracle WebLogic T3/IIOP deserialization RCE exploit (CVE-2023-21839, CVE-2020-14882). Targets Oracle WebLogic Server admin consoles and T3 listener ports.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Fast HTTP probing and lightweight fingerprinting using ProjectDiscovery httpx. Use for web recon with redirect-awareness and JSON output.
V5 样板 Micro-Skill：Pydantic 入参、micro_executor SDK、落盘 parsed.json、stderr S-06、stdout Agent 摘要 JSON（嵌入 raw_stdout）。
Build a basic understanding of the current project by scanning source code and available docs. Use when user asks for /init, project onboarding, quick repo familiarization, or initial architecture context.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Raw HTTP probing with curl. Use for custom method, headers and body requests in recon and validation.
Advanced web path scanner using multithreaded brute-force. Use for discovering hidden files, directories, and endpoints on web servers.
| name | exploit-weblogic |
| description | Oracle WebLogic T3/IIOP deserialization RCE exploit (CVE-2023-21839, CVE-2020-14882). Targets Oracle WebLogic Server admin consoles and T3 listener ports. |
| metadata | {"openclaw":{"emoji":"💥","requires":{"bins":["python3","java"],"env":[]},"primaryEnv":null}} |
Exploits Oracle WebLogic Server deserialization vulnerabilities via the T3 and IIOP protocols for unauthenticated remote code execution.
Oracle WebLogic Server 10.x, 12.x, 14.x — CVE-2023-21839 (IIOP/T3 JNDI injection) and CVE-2020-14882 (admin console auth bypass + RCE).
Provide target (WebLogic base URL or T3 endpoint, e.g. t3://host:7001). The skill fingerprints the version and selects the appropriate exploit chain automatically.
| Param | Type | Required | Description |
|---|---|---|---|
| target | string | yes | WebLogic URL or T3 endpoint |
| cve | string | no | Force a specific CVE (e.g. CVE-2023-21839) |
| cmd | string | no | OS command to execute (default: id) |
| timeout | int | no | Timeout in seconds (default: 60) |
T3 port is typically 7001 or 7002. Admin console is on port 7001 HTTP/HTTPS. Use nmap to confirm open WebLogic ports before exploitation.
