##
Java GUI version of the Oracle WebLogic Server Proxy Plug-In RCE (Remote Code Execution) vulnerability exploitation tool.
├── pom.xml # Maven project configuration file
├── README.md # Project documentation
├── run.bat # Windows startup script
├── Main.java # Program entry point
│ └── Exploit.java # Core exploit logic
│ └── MainWindow.java # GUI main window
└── HttpClient.java # HTTP request utility
The program window contains the following areas:
* Target URL text area: supports multi-line input, one target address per line
* Command execution text field: enter the command to execute
* Execute Exploit button: starts the exploit test
* Clear Log button: clears the log and output areas
* Displays the test process and status information in real time
* Uses a gray background for easy distinction
4. **Command Output Area** (bottom right)
* Multiple targets are separated by equals signs
* Uses a light yellow background for easy distinction
* **GUI Interface** : Graphical user interface built with Swing
* **Multi-target Support** : Supports testing multiple target systems simultaneously, one URL per line
* **Maven Management** : Uses Maven for dependency management and building
* **HTTP Client** : HTTP requests implemented with OkHttp
* **Multi-path Testing** : Automatically tests multiple possible vulnerability paths
* **Real-time Logging** : Displays the execution process and results in real time
* **Command Output** : Displays command execution results, automatically separated between multiple targets
* **Asynchronous Execution** : Uses SwingWorker for asynchronous execution without blocking the UI
The packaged JAR file is located at: `target/cve-2026-21962-1.0.0.jar`
#### Method 1: Using the Startup Script (recommended)
Double-click the `run.bat` file to start the program
mvn exec:java -Dexec.mainClass="com.ashwesker.cve202621962.Main"
java -jar target/cve-2026-21962-1.0.0.jar
#### Method 4: Running with the Java Command (requires compilation first)
java -cp "target/classes;[dependency jar path]" com.ashwesker.cve202621962.Main
[*] Target URL:
[*] Testing path:
------------------------------------------------------------
================================================================================
[*] Target URL:
[*] Testing path:
------------------------------------------------------------
1. After starting the program, enter the target server address in the "Target URL" text area
* For example: ` or `
2. Enter the command to execute in the "Command to Execute" field
* For example: `whoami`, `id`, `powershell -c ...`, etc.
3. Click the "Execute Exploit" button to start the test
4. Check the "Execution Log" below to understand the test process
5. Check the "Command Output" below to get the command execution results
1. Enter multiple target addresses in the "Target URL" text area, one per line
2. Enter the command to execute in the "Command to Execute" field
3. Click the "Execute Exploit" button to start the batch test
4. The program will test each target in sequence, and the output results of different targets are separated by `================` (80 equals signs)
5. Check the "Execution Log" below to understand the test process for each target
6. Check the "Command Output" below to get the command execution results for all targets
* Click the "Clear Log" button to clear the log and output areas
* The "Execute Exploit" button is disabled during execution and automatically re-enabled after completion
* The program supports window resizing, and all components automatically adapt to the window size
* **Affected Versions** : Oracle HTTP Server / WebLogic Proxy Plug-In < patched version (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0)
* **Vulnerability Type** : Remote Code Execution (RCE)
* **Authentication Requirement** : No authentication required
The program automatically tests the following paths:
⚠️ **Warning** : This tool is intended for authorized security testing only. Using this tool to attack systems without authorization is illegal.
* Please ensure you have explicit authorization before testing target systems
* For security research and penetration testing only
* Please comply with local laws and regulations
* The author is not responsible for any misuse
* **Layout Management** : BorderLayout, GridBagLayout, JSplitPane
* **Multithreading** : SwingWorker for asynchronous execution
* **SSL Support** : Ignores certificate validation, supports HTTPS
* Program entry point, sets the system look and feel and launches the GUI
* Communicates with the GUI via callback interface
* Displays execution logs and command output
This project is for educational and security research purposes only.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
