{"uuid": "6f0f16d3-28f4-49ef-bde4-88ac3047d328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14882", "type": "seen", "source": "https://t.me/hacking_Attack/49815", "content": "Quickstart  Quickstart details. (https://bonjourmalware.github.io/melody/installation)  TL;DR  Release  Get the latest release at https://github.com/bonjourmalware/melody/releases.  make install               # Set default outfacing interface\nmake cap                   # Set network capabilities to start Melody without elevated privileges\nmake certs                 # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules      # Enable the default rules\nmake service               # Create a systemd service to restart the program automatically and launch it at startup \n\nsudo systemctl stop melody  # Stop the service while we're configuring it  Update the filter.bpf file to filter out unwanted packets.  sudo systemctl start melody     # Start Melody\nsudo systemctl status melody    # Check that Melody is running      The logs should start to pile up in /opt/melody/logs/melody.ndjson.  tail -f /opt/melody/logs/melody.ndjson # | jq  From source  git clone https://github.com/bonjourmalware/melody /opt/melody\ncd /opt/melody\nmake build  Then continue with the steps from the release (https://github.com/bonjourmalware/melody#release) TL;DR.  Docker  make certs                           # Make self signed certs for the HTTPS fileserver\nmake enable_all_rules                # Enable the default rules\nmkdir -p /opt/melody/logs\ncd /opt/melody/\n\ndocker pull bonjourmalware/melody:latest\n\nMELODY_CLI=\"\" # Put your CLI options here. Example : export MELODY_CLI=\"-s -i 'lo' -F 'dst port 5555' -o 'server.http.port: 5555'\"\n\ndocker run \\\n    --net=host \\\n    -e \"MELODY_CLI=$MELODY_CLI\" \\\n    --mount type=bind,source=\"$(pwd)/filter.bpf\",target=/app/filter.bpf,readonly \\\n    --mount type=bind,source=\"$(pwd)/config.yml\",target=/app/config.yml,readonly \\\n    --mount type=bind,source=\"$(pwd)/var\",target=/app/var,readonly \\\n    --mount type=bind,source=\"$(pwd)/rules\",target=/app/rules,readonly \\\n    --mount type=bind,source=\"$(pwd)/logs\",target=/app/logs/ \\\n    bonjourmalware/melody  The logs should start to pile up in /opt/melody/logs/melody.ndjson.  Rules  Rule syntax details. (https://bonjourmalware.github.io/melody/installation)  Example  CVE-2020-14882 Oracle Weblogic Server RCE:\n  layer: http\n  meta:\n    id: 3e1d86d8-fba6-4e15-8c74-941c3375fd3e\n    version: 1.0\n    author: BonjourMalware\n    status: stable\n    created: 2020/11/07\n    modified: 2020/20/07\n    description: \"Checking or trying to exploit CVE-2020-14882\"\n    references:\n      - \"https://nvd.nist.gov/vuln/detail/CVE-2020-14882\"\n  match:\n    http.uri:\n      startswith|any|nocase:\n        - \"/console/css/\"\n        - \"/console/images\"\n      contains|any|nocase:\n        - \"console.portal\"\n        - \"consolejndi.portal?test_handle=\"\n  tags:\n    cve: \"cve-2020-14882\"\n    vendor: \"oracle\"\n    product: \"weblogic\"\n    impact: \"rce\"  Logs  Logs content details. (https://bonjourmalware.github.io/melody/layers)  Example  Netcat TCP packet over IPv4 :  {\n  \"tcp\": {\n    \"window\": 512,\n    \"seq\": 1906765553,\n    \"ack\": 2514263732,\n    \"data_offset\": 8,\n    \"flags\": \"PA\",\n    \"urgent\": 0,\n    \"payload\": {\n      \"content\": \"I made a discovery today. I found a computer.\\n\",\n      \"base64\": \"SSBtYWRlIGEgZGlzY292ZXJ5IHRvZGF5LiAgSSBmb3VuZCBhIGNvbXB1dGVyLgo=\",\n      \"truncated\": false\n    }\n  },\n  \"ip\": {\n    \"version\": 4,\n    \"ihl\": 5,\n    \"tos\": 0,\n    \"length\": 99,\n    \"id\": 39114,\n    \"fragbits\": \"DF\",\n    \"frag_offset\": 0,\n    \"ttl\": 64,\n    \"protocol\": 6\n  },\n  \"timestamp\": \"2020-11-16T15:50:01.277828+01:00\",\n  \"session\": \"bup9368o4skolf20rt8g\",\n  \"type\": \"tcp\",\n  \"src_ip\": \"127.0.0.1\",\n  \"dst_port\": 1234,\n  \"matches\": {},\n  \"inline_matches\": [],\n  \"embedded\": {}\n}  \n\nDownload Melody (https://github.com/bonjourmalware/melody)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:58.151931Z"}