Lucene search

K

Exploit for Deserialization of Untrusted Data in Apache Log4J

🗓️ 14 Dec 2021 22:05:50Type 
githubexploit
 githubexploit
👁 272 Views

Exploit for Improper Input Validation in Apache Log4J. Repository with altered scripts related to CVE-2021-44228 ported to EDR environments. Scripts modified for compatibility with additional technologies' requirements. Palo Alto's Cortex XDR scripts rendered compatible by implementing incompatible Python modules and exposing an `xdr` entry point. Documentation of the `xdr` function's expected input and outputs can be found in each script. Two scripts to scan the filesystem for Log4j2 files vulnerable to Log4Shell (CVE-2021-44228) and check for exploitation attempts in local log files

Show more
Related

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
14 Dec 2021 22:50Current
10High risk
Vulners AI Score10
CVSS29.3
CVSS310
EPSS0.97112
272
.json
Report