weblogic

Weblogic复现之任意文件上传

随声附和 提交于 2019-12-01 21:53:13
最近在复现weblogic,今天复现一下其中的任意文件上传漏洞。 漏洞说明 版本 此漏洞涉及版本 10.3.6.0 12.1.3.0 12.2.1.2 12.2.1.3 环境部署 进入该漏洞环境目录 cd vulhub/weblogic/CVE-2018-2094 环境构建 sudo docker-compose build 启动 sudo docker-compose up -d 漏洞复现 前提 访问 http://your-ip:7001/console,即可看到后台登录页面 在CVE-2018-2894环境目录下,查看账号密码,运行以下命令: sudo docker-compose logs | grep password root@localhost:vulhub/weblogic/CVE-2018-2894# docker-compose logs | grep password weblogic_1 | ----> 'weblogic' admin password: ofX5JwIc weblogic_1 | admin password : [ofX5JwIc] weblogic_1 | * password assigned to an admin-level user. For * weblogic_1 | * password assigned to an

Are Guava-11.0.2.jar conflicting with com.google.common_1.0.0.0_0-6.jar?

妖精的绣舞 提交于 2019-12-01 21:21:28
I have a problem to deploy an application on weblogic server, after a discussion here on stackoverflow i realized that the problem is that weblogic 12c is using a lib file com.google.common_1.0.0.0_0-6.jar , and my application is using Guava-11.0.2.jar, and it sound for me like they are conflicting, tried to search on google but i have no idea what to do, whats the proper solution to solve it? I came across the same problem, what I did was, I replaced the com.google.common_1.0.0.0_0-6.jar file from weblogic-home/modules with the latest Guava that's currently guava-13.0.1.jar, but then i saw

Weblogic 11g URL Rewrite

孤街浪徒 提交于 2019-12-01 19:39:44
I have a client running a WebLogic 11g install on a Windows Server machine who wishes to implement Apache-style mod_rewrite-like functionality to translate requests for http://easyurl.com to http://super.complicated.com/with/this/junk?here=and_more . I have scoured the Internet for advice, but all I can find are other people who are asking the same question and not getting any answer. Assuming that installing 3rd-party apps is not an option, how do I implement this in WebLogic? Edit: Now that I think about it, this question probably belongs on Server Fault. I'll move it there. Further edit:

Weblogic乱码解决过程

可紊 提交于 2019-12-01 18:52:34
起因 今天在公司部署项目的时候,在Weblogic下部署服务的过程中遇到了Jsp页面乱码的问题,现将修复过程分享出来。[以下修复基于Weblogic_10.3.6.0、JDK为1.6环境] 问题描述 目前有一套代码,原本是跑在Tomcat上的,如今移植到Weblogic中去,JSP页面乱码、在Oracle中取出的数据都也出现了乱码。 修复过程 先检查以下文件 1. 检查系统i18n文件 检查Weblogic所处系统下的i18n文件是否正确 1 cat /etc/sysconfig/i18n 得到的结果是,证明系统的编码没有问题 12 LANG="en_US.UTF-8"SYSFONT="latarcyrheb-sun16" 2. 检查并修改项目下的 pom.xml 文件中如下,设置UTF-8编码[若不是Maven项目,请跳过],当前Maven项目Version:3.3.9 123456789101112131415161718192021222324252627 <properties> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> ... </properties><plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId

Weblogic乱码解决过程

放肆的年华 提交于 2019-12-01 18:46:05
起因 今天在公司部署项目的时候,在Weblogic下部署服务的过程中遇到了Jsp页面乱码的问题,现将修复过程分享出来。[以下修复基于Weblogic_10.3.6.0、JDK为1.6环境] 问题描述 目前有一套代码,原本是跑在Tomcat上的,如今移植到Weblogic中去,JSP页面乱码、在Oracle中取出的数据都也出现了乱码。 修复过程 先检查以下文件 1. 检查系统i18n文件 检查Weblogic所处系统下的i18n文件是否正确 1 cat /etc/sysconfig/i18n 得到的结果是,证明系统的编码没有问题 12 LANG="en_US.UTF-8"SYSFONT="latarcyrheb-sun16" 2. 检查并修改项目下的 pom.xml 文件中如下,设置UTF-8编码[若不是Maven项目,请跳过],当前Maven项目Version:3.3.9 123456789101112131415161718192021222324252627 <properties> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> ... </properties><plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId

JSTL support in Weblogic

拜拜、爱过 提交于 2019-12-01 18:16:11
问题 Im trying to start working with Java EE using Weblogic, and i cant make JSTL tags work, in simpliest code i get the following errors when deploying my application: index.jsp:1:4: No tag library could be found with this URI. Possible causes could be that the URI is incorrect, or that there were errors during parsing of the .tld file. <%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%> ^----^ index.jsp:1:4: No tag library could be found with this URI. Possible causes could be that

Weblogic javax.naming.NameNotFoundException while running application

℡╲_俬逩灬. 提交于 2019-12-01 18:12:33
I have created a data source name in Weblogic 10.3.6 as jdbc/appsmDS and the same name has been given in application to lookup. However when I am trying to run application, I am getting the following error javax.naming.NameNotFoundException: While trying to lookup 'jdbc/appsmDS' didn't find subcontext 'jdbc'. Resolved ''; remaining name 'jdbc/appsmDS' How can I resolve this issue? when looking up the DS the full JNDI structure maps to java:jdbc/appsmsDS . Please use it for lookup. Rodrigo Klein The problem in this case is probably that the datasource is not deployed in the "server" inside

JSTL support in Weblogic

懵懂的女人 提交于 2019-12-01 17:56:05
Im trying to start working with Java EE using Weblogic, and i cant make JSTL tags work, in simpliest code i get the following errors when deploying my application: index.jsp:1:4: No tag library could be found with this URI. Possible causes could be that the URI is incorrect, or that there were errors during parsing of the .tld file. <%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%> ^----^ index.jsp:1:4: No tag library could be found with this URI. Possible causes could be that the URI is incorrect, or that there were errors during parsing of the .tld file. <%@taglib prefix="c" uri

How to access JNDI data source defined in weblogic 10.3.6

谁说胖子不能爱 提交于 2019-12-01 17:07:27
I have created a JNDI data-source using my weblogic console but I am not able to access the object from my web application. Below are the details In weblogic 10.3.6, I have given the JNDI name for datasource as : jdbc/mydb To get DB connection from my web application I have written this code in my web application: Context initContext = new InitialContext(); DataSource ds = (DataSource)initContext.lookup("java:/comp/env/jdbc/mydb"); jndiConnection = ds.getConnection(); Earlier I was using Tomcat as server and I was able to get DB connection when I configured the resource details in the file

weblogic.application.ModuleException: Context path '' is already in use by the module: / application:

↘锁芯ラ 提交于 2019-12-01 16:22:21
When i am trying to run weblogic server 12c , it is throwing this error and is unable to start. <Apr 16, 2013 2:42:57 PM IST> <Warning> <HTTP> <BEA-101384> <WLServlet annotation is deprecated, please use servlet 3.0 annotation instead. App:acsportal@acs-portal.war, Class:oracle.adfinternal.view.faces.activedata.AdsServlet> <Apr 16, 2013 2:42:58 PM IST> <Error> <Deployer> <BEA-149205> <Failed to initialize the application "acsportal" due to error weblogic.application.ModuleException: Context path '' is already in use by the module: / application: acs-portal weblogic.application.ModuleException: