280 matches found
log4shell-tools
log4shell.tools log4shell.tools is a tool that allows you to run a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046. This is the code that runs https://log4shell.alexbakker.me. If you'd like to inspect the code or...
nginx-mitigate-log4shell
nginx-mitigate-log4shell Mitiga los ataques que explotan la vulnerabilidad log4shell CVE-2021-44228 y CVE-2021-45046 mediante el script LUA de Nginx Requiere que el módulo lua de Nginx https://www.nginx.com/resources/wiki/modules/lua/ esté habilitado. Use include /path/to/mitigate-log4shell.conf;...
log4j-detector
Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...
Log4j-CVE-Detect
Log4J-CVE-Detect This repository contains a set of YARA rules for detecting versions of log4j which are vulnerable to CVE-2021-44228, CVE-2021-45046, and / or CVE-2021-45105 by looking for a number of features which appear in affected versions. This tool works recursively on binary files such as...
Log4Shell-Payloads
🚨 Colección de Payloads Log4Shell Una lista curada de payloads de explotación Log4Shell / Log4J dirigidos a: CVE-2021-45046 CVE-2022-42889 🔗 Por @nav1n0x 🔥 Payloads de una línea ✅ Oneliner 1bash cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...
log4j-scan
log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...
log4j-samples
log4j-muestras Muestras de versiones de la librería log4j para ayudar a los escáneres/detectores de log4j incluyendo nuestro propio log4j-detector a mejorar su precisión para detectar CVE-2021-45046 y CVE-2021-44228. Las muestras incluyen jars sombreados, uber jars, jars ejecutables de spring-boo...
log4jjndilookupremove
log4jjndilookupremove 指定されたディレクトリ内のjarからLog4JのJndiLookup.classを削除するシンプルなスクリプトです。 このスクリプトは、アプリケーションが適切なLog4Jバージョンで再パッケージ化されるまでの一時的な対策として、CVE-2021-45046およびCVE-2021-44228を解決するために使用できます。 使用方法 Linuxまたはその他のnixシステムでは、スキャンしたいディレクトリでこのスクリプトを実行するか、ターゲットディレクトリを最初のパラメータとして追加します: root@kitploit: $. scanjars.sh...
Log4Shell-obfuscated-payloads-generator
Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator puede generar cargas primarias ofuscadas o cargas secundarias ofuscadas de CVE-2021-44228 o CVE-2021-45046 para evadir la detección de WAF. La idea de diseño de Log4Shell-obfuscated-payloads-generator Installation...
log4j2_vul_local_scanner
Escáner Local de Vulnerabilidad Log4j2 CVE-2021-45046 Script de detección local de vulnerabilidades Log4j, escanea todos los procesos java del host, comprueba si se ha introducido el jar log4j-core vulnerable, y si es posible sufrir un ataque de ejecución remota de código CVE-2021-45046. Sube el...
Log4j_scan_Advance
log4j-scan 취약한 log4j 호스트를 찾기 위한 완전 자동화된 정확하고 광범위한 스캐너 기능 URL 목록 지원 60개 이상의 HTTP 요청 헤더 퍼징 기존 도구처럼 34개 헤더만 퍼징하는 것이 아님 HTTP POST 데이터 파라미터 퍼징 JSON 데이터 파라미터 퍼징 취약점 발견 및 검증을 위한 DNS 콜백 지원 WAF 우회 페이로드 🚨 공지 Log4J v2.15.0에는 전체 RCE를 가능하게 하는 패치 우회가 존재합니다. FullHunt는 log4j-scan에 CVE-2021-45046을 안정적으로 탐지할 수 있도록...
Log4Shell-Sandbox-Signature
Log4Shell-샌드박스-시그니처 Log4ShellCVE-2021-45046 샌드박스 시그니처 정규식 : https://github.com/back2root/log4shell-rex Cape 샌드박스 시그니처 Cuckoo 샌드박스 시그니처...
Log4Shell
log4shell A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for vulnerability...
CVE-2021-45046-Info
CVE-2021-45046-Info Oh no another one POC root@kitploit: $ctx:apiversion - %dyyyy-MM-dd HH:mm:ss %-5p %c1:%L - %mnolookups%n LINKS https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/...
PowerShell-Log4J-Scanner
PowerShell-Log4J-Scanner puede encontrar, analizar y parchear archivos Log4J debido a CVE-2021-44228, CVE-2021-45046 sitio oficial de Apache: https://logging.apache.org/log4j/2.x/download.html El script es para Powershell, debería funcionar en Win10 o Win11...
log4j2-CVE-2021-45046
Aplicación vulnerable de muestra Log4j2 CVE-2021-45046 Versiones afectadas: todas las versiones desde 2.0-beta9 hasta 2.15.0 Esta aplicación se basa en una aplicación web Spring Boot vulnerable a CVE-2021-45046 Utiliza Log4j 2.14.1 a través de spring-boot-starter-log4j2 2.6.1. Ejecución de la...
log4j-scanner
log4j-scanner A Log4j vulnerability scanner is automated scanner to find log4j CVE-2021-44228 and CVE202145046 vulnerabilities in web applications. Features 1- It supports multiple URL to perform scan 2- It has payload that can bypass some WAF 3- It supports GET and POST request 4- It supports us...
Log-4j-scanner
log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...