Oracle WebLogic Server Java Deserialization RCE

This repository provides a Python-based exploit for CVE-2015-4852, a critical Java deserialization vulnerability affecting several enterprise applications (Websphere, JBoss, OpenNMS, Symantec Endpoint Protection Manager). The main script, 'serialator.py', allows the user to select the target application, specify the target host and port, and supply an arbitrary command to execute on the target. The exploit works by sending a malicious serialized Java object (payload) to the target application over HTTP, exploiting the deserialization flaw to achieve remote code execution. The script supports both exploitation (arbitrary command execution) and detection (by triggering a ping from the target to an attacker-controlled host). The included 'ICMPListener.py' script can be used to listen for incoming ICMP echo requests, which helps verify successful exploitation in detection mode. The repository is structured with a main exploit script, a listener script for detection, and a README providing usage instructions and background. No hardcoded network endpoints are present except for the default listener IP (0.0.0.0) in the ICMP listener. The exploit is operational and can be used for both vulnerability verification and actual exploitation, depending on the supplied command.