zzz@zzz-virtual-machine
:/home/11/Chapter4/实战18 WebLogic任意文件上传漏洞$ curl -v http
://192
.168
.20
.128
:32788/ws_utc/config
.do
* Trying 192
.168
.20
.128
:32788
...
* Connected to 192
.168
.20
.128 (192
.168
.20
.128) port 32788 (#0)
>
GET /ws_utc/config
.do HTTP/1
.1
> Host
: 192
.168
.20
.128
:32788
> User-Agent
: curl/7
.81
.0
> Accept
: */*
>
* Mark bundle as
not supporting multiuse
< HTTP/1
.1 200 OK
< Date
: Tue, 02 Dec 2025 15
:53
:59 GMT
< Content-Length
: 5912
< Content-Type
: text/html;charset=UTF-8
< Set-Cookie
: JSESSIONID=yj3fxUisbdX7VPXYW_yPUVhc1kTosX59ygzuEL6LJ_pQi0dUAVJj!-1959541400; path=/; HttpOnly
<
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4
.0 Transitional//EN">
<!--
*
* Copyright (c) 2005,2013, Oracle and/or its affiliates
. All rights reserved
.
*
-->
<html documentType="html4-loose" lang="en_US">
<head>
<title>settings</title>
<
meta http-equiv=Content-Type content="text/html; charset=utf-8">
<link href="css/tc-brand
.css" type="text/css" rel="stylesheet">
<link rel="shortcut icon" href="images/favicon
.ico" type="image/x-icon">
<
meta HTTP-EQUIV="Pragma" CONTENT="no-cache">
<
meta HTTP-EQUIV="Expires" CONTENT="-1">
<script language="JavaScript" src="js/jquery/jquery-latest
.min
.js" type="text/javascript"></script>
<link href="css/jquery_theme/smoothness/jquery-ui-latest
.custom
.css" type="text/css" rel="stylesheet">
<script language="JavaScript" src="js/jquery/jquery-ui-latest
.custom
.min
.js" type="text/javascript"></script>
<script language="JavaScript" src="js/tc/
common.js" type="text/javascript"></script>
</head>
<body>
<div id="tc_container">
<div>
<table width="100%" role="presentation" summary="">
<tr>
<td width="40px">
<a id="skip-link" href="#mainContentStart">Skip to main content</a>
<a href="http
://www
.oracle
.com/" tar
get="_top">
<img src="images/oracle-logo-small
.png"
alt="Oracle logo" style="border
: 0pt none; margin
: 2px 2px 2px 5px; padding
: 0pt;"
align="left" border="0" height="33" width="33">
</a>
</td>
<td valign="bottom">
<span class="pageheader tc_background">settings</span>
</td>
</tr>
</table>
</div>
<div id='linetable'>
<table cellspacing="0" cellpadding="0" width="100%" border="0" role="presentation" summary="">
<tr>
<td class="ltgrayline"><img src="images/sp
.gif" height="1" width="1" alt=""></td>
</tr>
</table>
</div>
<div id="tc_menu">
<table cellspacing="0" cellpadding="0" width="90%" border="0" align="center" role="presentation" summary="">
<tr>
<td></td>
</tr>
</table>
</div>
<div id="tc_mainContent" style="display
:none">
<div id="tc_sidebar">
<div id='tc_setting_menu_container'>
</div>
</div>
<div id="tc_content">
<a name="mainContentStart" id="mainContentStart" tabindex="-1"></a>
<div id="tc_setting_panel_container"></div>
</div>
<div>
</div>
</div>
<div id="tc_footer">
<div id="footer">
<span><a href="#top" title="Back to Top">
<img src="images/sp
.gif" height="20" width="21" border="0" alt="Back to Top" class="backtotoff"
onmouseover="className='backtoton'" onmouseout="className='backtotoff'"></a></span>
<p>
<!-- f
:message bundle='javax
.servlet
.jsp.jstl
.fmt
.LocalizationContext@5bd4e594' key='label_major_version' />
: <br>
Build ID
: <br-->
Copyright 2013 ©,2013, Oracle and/or its affiliates
. All rights reserved
.</p>
</div>
</div>
</div>
<script type="text/javascript">
var defaultType = '';
var localizedMap={};
localizedMap['label_choose_wsdl_recent']='Recent WSDL
Files';
localizedMap['label_choose_wsdl_available']='Available WSDL
Files';
localizedMap['title_remove_previous_wsdl']='Remove wsdl from cached list';
localizedMap['label_wsdllist_hide']='Hide WSDL List';
localizedMap['label_wsdllist_show']='Show WSDL List';
localizedMap['label_setting_menu_item_general']='General';
localizedMap['label_setting_menu_item_proxy']='Proxy';
localizedMap['label_setting_menu_item_security']='Security';
localizedMap['label_setting_menu_item_general_desc']='General Setting';
localizedMap['label_setting_menu_item_proxy_desc']='Proxy Setting';
localizedMap['label_setting_menu_item_security_desc']='Security Setting';
localizedMap['label_section_key_store_list']='Saved JKS Keystores';
localizedMap['label_section_key_store_name']='Setting Name';
localizedMap['label_section_key_store_
filename']='Keystore
File';
localizedMap['label_section_key_store_password']='Keystore Password';
localizedMap['label_section_key_store_do_
not_save_password']='Do
not save password in product env
.';
localizedMap['label_section_no_key_store_password']='No pre-defined password';
localizedMap['label_section_no_key_store']='No pre-defined key store setting';
localizedMap['label_setting_title_add_keystore']='Add Keystore Setting';
localizedMap['label_setting_title_edit_keystore']='Edit Keystore Setting';
localizedMap['label_setting_action_add']='Add';
localizedMap['label_setting_action_edit']='Edit';
localizedMap['label_setting_action_remove']='Remove';
localizedMap['label_setting_action_cancel']='Cancel';
localizedMap['label_setting_action_cancel_edit']='Cancel Edit';
localizedMap['label_setting_action_submit']='Submit';
localizedMap['label_setting_action_submit_edit']='Submit Edit';
localizedMap['label_setting_is_
not_valid']='is
not valid';
localizedMap['label_setting_save_success']='Save successfully';
localizedMap['label_setting_menu_item_display']='Display information';
localizedMap['please_input_the_correct_host_name']='Please input the correct host name
.';
localizedMap['please_input_the_correct_port_name']='The port number must be greater than zero, please input the correct port number
.';
</script>
<script language="JavaScript" src="js/tc/param_ui_render
.js" type="text/javascript"></script>
<script language="JavaScript" src="js/tc/setting
.js" type="text/javascript"></script>
<script language="JavaScript" src="js/tc/setting_security
.js" type="text/javascript"></script>
</body>
</html>
* Connection #0 to host 192
.168
.20
.128 left intact
zzz@zzz-virtual-machine
:/home/11/Chapter4/实战18 WebLogic任意文件上传漏洞$ curl -v http
://192
.168
.20
.128
:32788/ws_utc/css/index
.html
* Trying 192
.168
.20
.128
:32788
...
* Connected to 192
.168
.20
.128 (192
.168
.20
.128) port 32788 (#0)
>
GET /ws_utc/css/index
.html HTTP/1
.1
> Host
: 192
.168
.20
.128
:32788
> User-Agent
: curl/7
.81
.0
> Accept
: */*
>
* Mark bundle as
not supporting multiuse
< HTTP/1
.1 404
Not Found
< Date
: Tue, 02 Dec 2025 15
:54
:08 GMT
< Content-Length
: 1164
< Content-Type
: text/html; charset=UTF-8
<
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4
.0 Draft//EN">
<HTML>
<HEAD>
<TITLE>Error 404--
Not Found</TITLE>
</HEAD>
<BODY bgcolor="white">
<FONT FACE=Helvetica><BR CLEAR=all>
<TABLE border=0 cellspacing=5><TR><TD><BR CLEAR=all>
<FONT FACE="Helvetica" COLOR="black" SIZE="3"><H2>Error 404--
Not Found</H2>
</FONT></TD></TR>
</TABLE>
<TABLE border=0 width=100% cellpadding=10><TR><TD VALIGN=top WIDTH=100% BGCOLOR=white><FONT FACE="Courier New"><FONT FACE="Helvetica" SIZE="3"><H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1
.1</i>
:</H3>
</FONT><FONT FACE="Helvetica" SIZE="3"><H4>10
.4
.5 404
Not Found</H4>
</FONT><P><FONT FACE="Courier New">The server has
not found anything matching the Request-URI
. No indication is given of whether the condition is temporary or permanent
.</p><p>If the server does
not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead
. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address
.</FONT></P>
</FONT></TD></TR>
</TABLE>
</BODY>
</HTML>
* Connection #0 to host 192
.168
.20
.128 left intact
zzz@zzz-virtual-machine
:/home/11/Chapter4/实战18 WebLogic任意文件上传漏洞$
在此次博客中，作者遇到了一个编程错误：翻译文件**/common/meta.jsp**无法找到。错误源于作者修改了文件名。通过将文件名更新为修改后的名称，问题得到了解决。博客内容提醒开发者注意文件名变更可能引发的路径问题。
扫一扫
1918
到【灌水乐园】发言
