CNVD-C-2019-48814、CVE-2019-2725 Weblogic _async remote command execution exp The main code is based on js implementation. Linux Payload uses Jason, Windows Payload is modified 10271, java.lang.Runtime is executed. Environmental needs All versions of Windows. Usage cve2019-2725_weblogic_rce.bat http://192.168.31.5:7001 "cat /etc/passwd" Vulnerability information 关于Oracle WebLogic wls9-async组件存在反序列化远程命令执行漏洞的安全公告 WebLogic RCE(CVE-2019-2725)漏洞之旅 Oracle Security Alert Advisory – CVE-2019-2725 Contact i@Flyfishsec.uu.me