CVE-2021-45046-Info

CVE-2021-45046-Info Oh no another one POC root@kitploit: $ctx:apiversion - %dyyyy-MM-dd HH:mm:ss %-5p %c1:%L - %mnolookups%n LINKS https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/...

log4j-samples

log4j-muestras Muestras de versiones de la librería log4j para ayudar a los escáneres/detectores de log4j incluyendo nuestro propio log4j-detector a mejorar su precisión para detectar CVE-2021-45046 y CVE-2021-44228. Las muestras incluyen jars sombreados, uber jars, jars ejecutables de spring-boo...

log4jjndilookupremove

log4jjndilookupremove A simple script to remove Log4J JndiLookup.class from jars in given directory. This script can be used to temporarily resolve the CVE-2021-45046 and CVE-2021-44228, until the application can be repackaged with a proper Log4J version. Usage On Linux or other nix system just r...

log4shell-tools

log4shell.tools log4shell.tools es una herramienta que te permite ejecutar una prueba para comprobar si alguna de tus aplicaciones está afectada por las vulnerabilidades recientes en log4j: CVE-2021-44228 y CVE-2021-45046. Este es el código que ejecuta https://log4shell.alexbakker.me. Si quieres...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

log4shell-rex

Log4Shell-Rex The following RegEx was written in an attempt to match indicators of a Log4Shell CVE-2021-44228 and CVE-2021-45046 exploitation. If you run a version from pre 2021/12/21, it's highly recommended to test and update. I've removed some quirks and enhanced performance. The Regex aims...

log4j-scan

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

log4j2_vul_local_scanner

Log4j2 Vulnerability Local Scanner CVE-2021-45046 Log4j 漏洞本地检测脚本，扫描主机上所有java进程，检测是否引入了有漏洞的log4j-core jar包，是否可能遭到远程代码执行攻击（CVE-2021-45046）。上传扫描报告到指定的服务器。 Scan all java processes on your host to check whether it's affected by log4j2 remote code executionCVE-2021-45046, then upload the report to your...

nginx-mitigate-log4shell

nginx-mitigate-log4shell Mitigate log4shell CVE-2021-44228 and CVE-2021-45046 vulnerability attacks using Nginx LUA script Requires the Nginx lua module https://www.nginx.com/resources/wiki/modules/lua/ to be enabled. Use include /path/to/mitigate-log4shell.conf; in the server ... context. Can be...

Log4Shell-Payloads

🚨 Log4Shell Payloads Collection A curated list of Log4Shell / Log4J exploitation payloads targeting: CVE-2021-45046 CVE-2022-42889 🔗 By @nav1n0x 🔥 One-Liner Payloads ✅ Oneliner 1 root@kitploit: cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator can generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection. The design idea of ​​Log4Shell-obfuscated-payloads-generator Installation root@kitploit: git...

Log4j-CVE-Detect

Log4J-CVE-Detect This repository contains a set of YARA rules for detecting versions of log4j which are vulnerable to CVE-2021-44228, CVE-2021-45046, and / or CVE-2021-45105 by looking for a number of features which appear in affected versions. This tool works recursively on binary files such as...

log4j2-CVE-2021-45046

Sample Log4j2 vulnerable application CVE-2021-45046 Versions Affected: all versions from 2.0-beta9 to 2.15.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45046 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it:...

Log4j_scan_Advance

log4j-scan Un escáner totalmente automatizado, preciso y extenso para encontrar hosts log4j vulnerables Características Soporte para listas de URLs. Fuzzing para más de 60 cabeceras de solicitud HTTP no solo 3-4 cabeceras como en herramientas vistas anteriormente. Fuzzing para parámetros de datos...

PowerShell-Log4J-Scanner

PowerShell-Log4J-Scanner pode encontrar, analisar e corrigir arquivos Log4J devido ao CVE-2021-44228, CVE-2021-45046 site oficial da apache: https://logging.apache.org/log4j/2.x/download.html O script é para PowerShell, deve funcionar no Win10 ou Win11...

log4j-cve-code-search-resources

Uso della ricerca del codice per aiutare a correggere/mitigare log4j CVE-2021-44228 e log4j CVE-2021-45046...

CyberSecurity_CVE-2021-45046

CVE-2021-45046...

Log4Shell

log4shell Ein vollautomatischer, präziser und umfassender Scanner zum Auffinden verwundbarer Log4j-Hosts Funktionen Unterstützung für URL-Listen. Fuzzing für mehr als 60 HTTP-Request-Header. Fuzzing für HTTP-POST-Daten-Parameter. Fuzzing für JSON-Daten-Parameter. Unterstützt DNS-Callback zur...

log4j-scanner

log4j-scanner Ein Log4j-Schwachstellenscanner ist ein automatisierter Scanner, um Log4j-Schwachstellen CVE-2021-44228 und CVE-2021-45046 in Webanwendungen zu finden. Funktionen 1- Er unterstützt mehrere URLs für den Scan 2- Er verfügt über Payloads, die einige WAF umgehen können 3- Er unterstützt...

Log-4j-scanner

log4j-scan Um scanner totalmente automatizado, preciso e abrangente para encontrar hosts vulneráveis ao log4j Recursos Suporte para listas de URLs. Fuzzing em mais de 60 cabeçalhos de requisição HTTP não apenas 3-4 cabeçalhos como em ferramentas anteriores. Fuzzing em parâmetros de dados POST HTT...