All Projects → Cymmetria → weblogic_honeypot

Cymmetria / weblogic_honeypot

Licence: MIT license
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

Programming Languages

python
139335 projects - #7 most used programming language
HTML
75241 projects

Projects that are alternatives of or similar to weblogic honeypot

Hacking
hacker, ready for more of our story ! 🚀
Stars: ✭ 413 (+1276.67%)
Mutual labels:  vulnerability, security-vulnerability
DemonHunter
Distributed Honeypot
Stars: ✭ 54 (+80%)
Mutual labels:  honeypot, deception
Herpaderping
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
Stars: ✭ 614 (+1946.67%)
Mutual labels:  vulnerability, security-vulnerability
exploits
Some of my public exploits
Stars: ✭ 50 (+66.67%)
Mutual labels:  vulnerability, security-vulnerability
WebTrap
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
Stars: ✭ 45 (+50%)
Mutual labels:  honeypot, deception
Pentesting
Misc. Public Reports of Penetration Testing and Security Audits.
Stars: ✭ 24 (-20%)
Mutual labels:  vulnerability, security-vulnerability
Exphub
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
Stars: ✭ 3,056 (+10086.67%)
Mutual labels:  vulnerability, weblogic
browserrecon-php
Advanced Web Browser Fingerprinting
Stars: ✭ 29 (-3.33%)
Mutual labels:  vulnerability, security-vulnerability
HellPot
HellPot is a portal to endless suffering meant to punish unruly HTTP bots.
Stars: ✭ 146 (+386.67%)
Mutual labels:  honeypot, deception
honeybits-win
Windows version of honeybits - a PoC tool to create breadcrumbs and honeytokens, to lead the attackers to your honeypots!
Stars: ✭ 20 (-33.33%)
Mutual labels:  honeypot, deception
Command Injection Payload List
🎯 Command Injection Payload List
Stars: ✭ 658 (+2093.33%)
Mutual labels:  vulnerability, security-vulnerability
Vulnogram
Vulnogram is a tool for creating and editing CVE information in CVE JSON format
Stars: ✭ 103 (+243.33%)
Mutual labels:  vulnerability, security-vulnerability
honeyku
A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
Stars: ✭ 56 (+86.67%)
Mutual labels:  honeypot, deception
Cowrie
Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io
Stars: ✭ 3,810 (+12600%)
Mutual labels:  honeypot, deception
Ehoney
安全、快捷、高交互、企业级的蜜罐管理系统,护网;支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functions.
Stars: ✭ 1,051 (+3403.33%)
Mutual labels:  honeypot, deception
rust-oracle
Oracle driver for Rust
Stars: ✭ 139 (+363.33%)
Mutual labels:  oracle
gradejs
GradeJS analyzes production Webpack bundles without having access to the source code of a website. Instantly see vulnerabilities, outdated packages, and more just by entering a web application URL.
Stars: ✭ 362 (+1106.67%)
Mutual labels:  vulnerability
apex-plugin-templates
Templates for Oracle APEX Plug-ins
Stars: ✭ 27 (-10%)
Mutual labels:  oracle
Loki
一个轻量级Web蜜罐 - A Little Web Honeypot.🍯🍯🍯🐝🐝🐝
Stars: ✭ 151 (+403.33%)
Mutual labels:  honeypot
oracle-single-install
让Oracle数据库安装变得简单化,支持单实例和CDB容器快速安装,只需简单配置即可
Stars: ✭ 37 (+23.33%)
Mutual labels:  oracle

WebLogic honeypot

Cymmetria Research, 2018.

https://www.cymmetria.com/

Written by: Omer Cohen (@omercnet) Special thanks: Imri Goldberg (@lorgandon), Itamar Sher, Nadav Lev

Contact: [email protected]

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability. The honeypots does a simple simulation of the WebLogic server and will allow attackers to use the vulnerability to attempt to execute code, and will report of such attempts.

It is released under the MIT license for the use of the community, pull requests are welcome!

Usage

  • Run without parameters to listen on default port (8080):

    python weblogic_server.py

  • Run with --help to see other command line parameters

See also

https://cymmetria.com/blog/honeypots-for-oracle-vulnerabilities/

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10271

Please consider trying out the MazeRunner Community Edition, the free version of our cyber deception platform. https://community.cymmetria.com/

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].