Tag Archives: oracle weblogic

A Quick Look Into the Oracle WebLogic Attacks

For awhile these attacks contained code that pointed to a webserver was down. Seems they changed servers and everything is up and running again. The POST shows the PowerShell script inside of the soap envelope. Extracting then base64-decoding the script … Continue reading

Posted in Malscript | Tagged , , | Comments Off on A Quick Look Into the Oracle WebLogic Attacks