Has anyone run serializekiller.py or weblogic.py on some domains?
In the latest server, fsoc, there are 2 scripts. Has anyone tried it on some domains? I am wondering on which servers we should be trying these. Any ideas?
Posted Nov 27, 2017, 11:57 AM UTC
05
i don't think i can emphasize this enough, so i'll try to in text form.
#DO NOT RUN REAL LIFE TOOLS ON ANY DOMAINS. EVER. PERIOD. NMAP, SERIALIZEKILLER, NOTHING.
why? because we don't need them shutting down part of the arg because their domains are getting attacked by someone running some random py script against their domains.
if they detect this activity (or if their higher ups/host detects it even), they could very well just outright cancel the arg altogether. so, once again, don't do this. for your own sake and ours.
(also, some of these tools can be taken to court over, and you could get arrested for having some of them even. in germany at least, nmap is considered a hacktool and can lead to imprisonment.)
I would like to emphasize with equal weight, that I know what I'm doing. I've studied the scripts too.
Now, I would never suggest something that would turn into a DDoS. I understand.
Have you studied them enough to realize that they did not originate from the show? They were copied directly from real GitHub repos.
The weblogic.py exploit is actually a wrapper script i wrote based on the forxglove exploit linked above: https://github.com/ZonkSec/weblogic-serialization-exploit-updated/blob/master/weblogic.py And yes, these are real exploits, do not go throwing them around unless you feel like being prosecuted.
Indeed I knew! Anyway, I don't want to get into verbal flames. Here is something just for fun, I hope you like it: http://phrack.org/archives/issues/69/6.txt