Get-log4j-Windows-local

Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description:...

JarHunter

JarHunter – Advanced JAR Analysis & Extraction Tool JarHunter is a tool designed to explore, search and extract specific classes from large JAR files quickly and efficiently. Instead of manually browsing thousands of classes, JarHunter allows you to search keywords across the entire JAR file and...

log4j-fix-CVE-2021-44228

log4j-fix-CVE-2021-44228 Windows Batch Script to Scan all the local drive and Fix the log4jCVE-2021-44228 impacted jars Below configurations are needed to make it work SET ZIPPATH =C:\PROGRA1\7-Zip\7z.exe set RESULTFILENAM E=log4jimpactedjars set APPLYFIX =FALSE set LOG4JLOGDIR =%temp% ZIPPATH...

CVE-2021-25641

CVE-2021-25641 A Exploit Tool For CVE-2021-25641. All dependencies was packed,You don't care the dependencies problem If you have dependencies you can just donwload the CVE-2021-25641.jar to run. Used for: Basic dubbo-common =2.7.3 Dubbo 2.7.0 to 2.7.8 Dubbo 2.6.0 to 2.6.9 Dubbo all 2.5.x version...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

ansible-role-log4shell

Ansible role - log4shell ⭐ Star us on GitHub — it motivates us a lot! Find Log4Shell CVE-2021-44228 on your system This role tries to find JAR and WAR from filesystem and from opened files lsof ⚠️ Your system may runs slowly during the scan due to a find on and the unarchive process to lookup...

CVE-2018-11770

CVE-2018-11770 Apache Spark Unauthenticated Reverse Shell RCE Standalone Python 3 RCE exploit for Apache Spark rewritten from this Metasploit module Exploit POC explained here. The exploit code itself is explained here. Tested with Python 3.7 on this target. Usage: root@kitploit:...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides a command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: root@kitploit: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jbo...

CVE-2021-44228_scanner-main-Modified-

CVE-2021-44228scanner modified - Deprecated Original Script and Repo: https://github.com/CERTCC/CVE-2021-44228scanner Modified by: Alex Pena Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of...

log4jjndilookupremove

log4jjndilookupremove 指定されたディレクトリ内のjarからLog4JのJndiLookup.classを削除するシンプルなスクリプトです。 このスクリプトは、アプリケーションが適切なLog4Jバージョンで再パッケージ化されるまでの一時的な対策として、CVE-2021-45046およびCVE-2021-44228を解決するために使用できます。 使用方法 Linuxまたはその他のnixシステムでは、スキャンしたいディレクトリでこのスクリプトを実行するか、ターゲットディレクトリを最初のパラメータとして追加します: root@kitploit: $. scanjars.sh...

HackBar

HackBar Burpsuite Plugin Usage Requirements Burpsuite How to Install root@kitploit: Download Latest Jar from https://github.com/d3vilbug/HackBar/releases/ and add in burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS Upcoming Features/Modules Ctrl + H shortcut WAF bypass SQLi...

CVE-2024-25897

パラメータ ip、puerto、ruta エクスプロイトの出力 ヘルプパネル エクスプロイトの説明 コードの説明をMarkdownで以下に示します。 コードの説明 このスクリプトは、Jenkins（CVE-2024-23897）の特定の脆弱性を悪用するために設計されています。JenkinsサーバーからJARファイルをダウンロードし、Jenkinsノードに接続するためのペイロードを実行します。以下、コードの各部分を説明します。 モジュールのインポート root@kitploit: import argparse import requests import os import...

log4j-checker

Log4j-Checker This repository contains scripts that can help identity .jar files which may be vulnerable to CVE-2021-44228 aka Log4Shell. Log4Shell Hash Check This script will find .jar files within the filesystem starting from a specific path, calculate a SHA-256 hash for each .jar file found -...

chk_log4j

chklog4j - 用于查找存在 log4j CVE-2021-44228 漏洞的 jar 文件的工具。 安装 1. git clone https://github.com/gcmurphy/chklog4j 2. cd chklog4j && cargo install --path . 使用 该工具仅检查单个文件，因此最好与 fd 之类的工具结合使用。 root@kitploit: $ fd -a -e jar -x chklog4j...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 취약점 스캐너 Windows OS. 사용 예시 사용법 root@kitploit: .\log4j-scanner.exe 출력 결과는 터미널에 표시됩니다. RMM을 통해 대상 컴퓨터에 배포하고 PowerShell 또는 CMD 프롬프트에서 시작/보고하세요. 소스에서 빌드 root@kitploit: git clone https://github.com/name/log4j-scanner.git cd log4j-scanner/ go get...

inspec-log4j

inspec-log4j このプロファイルは、脆弱性のあるバージョンのLog4j Core JARファイルを、ファイルシステム上およびWARファイル内に埋め込まれた状態で直接スキャンします。 プロファイルをローカルで実行する root@kitploit: git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j リモートSSHターゲットに対してプロファイルを実行する 対象マシンに特権ユーザー（rootなど）のSSHキーが読み込まれていることを確認してください。...

log4j-scanner

Log4j Scanner Discover Log4Shell vulnerability CVE-2021-44832 in your files and directories. Description This Rust-based Log4j Scanner is designed to help you identify and locate vulnerable files that may contain the Log4Shell vulnerability CVE-2021-44832. It scans files and directories to find...

hot-jar-swapping-urlclassloader

URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...

marshalsec-jar

marshalsec-jar Needed the file for a test...

CVE-2021-44228_scanner

CVE-2021-44228scanner Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of JndiLookup.class. Depending on the platform that you are investigating, the PowerShell or the Python3 script may make more...