Weblogic漏洞复现

Weblogic漏洞复现

cd /var/local/software

/var/local/soft/vulhub-master

解决报错

/var/local/soft/vulhub-master

✔ weblogic 17 layers [⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿] 0B/0B Pulled 294.9s

✔ 6599cadaf950 Pull complete 10.3s

✔ 23eda618d451 Pull complete 2.3s

✔ f0be3084efe9 Pull complete 1.9s

✔ 52de432f084b Pull complete 3.7s

✔ a3ed95caeb02 Pull complete 4.0s

✔ a2318f26c625 Pull complete 11.7s

✔ 1aa642dd8cc1 Pull complete 7.5s

✔ b307208f8bf5 Pull complete 20.3s

✔ 1dfbbdcc497d Pull complete 12.8s

✔ a53e674a7606 Pull complete 35.8s

✔ 5f06bb51fa3c Pull complete 31.3s

✔ ff0ff72567f2 Pull complete 189.5s

✔ 684862046025 Pull complete 34.0s

✔ abbf8d475455 Pull complete 252.3s

✔ 848eb11ef744 Pull complete 37.6s

✔ 2f3438f2b83b Pull complete 42.1s

✔ 8e5871e15571 Pull complete 47.2s

[+] Building 0.0s (0/0) docker:default

[+] Running 1/1

✘ Network weak_password_default Error 0.2s

failed to create network weak_password_default: Error response from daemon: Failed to program FILTER chain: iptables failed: iptables --wait -I FORWARD -o br-dee114e10024 -j DOCKER: iptables v1.4.21: Couldn't load target `DOCKER':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

(exit status 2)

1. pkill docker
3. iptables -t nat -F
5. ifconfig docker0 down
7. brctl delbr docker0
9. docker -d
11. systmctl restart docker

systemctl restart docker

192.168.23.154:7001

http://192.168.23.154:7001/console

username weblogic

password Oracle@123

http://192.168.23.154:7001/hello/file.jsp?path=/etc/passwd