Skip to content

Weblogic IIOP Protocol Detection

ID: weblogic-iiop-detect

Severity: info

Author: F1tz

Tags: network,weblogic,detect,oracle,iiop,detection,tcp

The IIOP (Internet Inter-ORB Protocol) protocol makes it possible for distributed programs written in different programming languages to communicate over the Internet.

id: weblogic-iiop-detect
info:
name: Weblogic IIOP Protocol Detection
author: F1tz
severity: info
description: |
The IIOP (Internet Inter-ORB Protocol) protocol makes it possible for distributed programs written in different programming languages to communicate over the Internet.
metadata:
max-request: 1
tags: network,weblogic,detect,oracle,iiop,detection,tcp
tcp:
- inputs:
- data: "{{hex_decode('47494f50010200030000001700000002000000000000000b4e616d6553657276696365')}}"
host:
- "{{Hostname}}"
read-size: 1024
matchers-condition: and
matchers:
- type: word
words:
- "GIOP"
- "weblogic"
condition: and
# digest: 490a0046304402204ed6080003aeebad85394ff2405859b3d4043adffae85b5a2fb6477ecdd6d5330220645e739a3afb53e13c2d0f22a0a4a2fc6883ec3ec82d12a3c9ff3dc3b8960e1f:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "network/detection/weblogic-iiop-detect.yaml"

View on Github