log4j2-exploit

Log4Shell CVE-2021-44228 proof of concept Requirement Java JDK/JRE 8 or later version curl exploitable Simple spring boot application that serves a login page with user and password. It logs the user name when POSTed to /. It is not required for the application to log any user provided input...

jndi-ldap-test-server

jndi-ldap-test-server This is a minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. How to test vulnerability to CVE-2021-44228 1. Download the test server binary for your platform you can find all binaries under Release...

CVE-2021-44228-PoC-log4j-bypass-words

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on 🐱‍💻 ✂️ 🤬 LOG4J Java exploit - WAF and patches bypass tricks 📝 Description CVE-2021-44228 works on: log4j: 2.0 = Apache log4j = 2.14.1 Java version already patched: 6u211+, 7u201+, 8u191+, 11.0.1+. Windows...

TPASLog4ShellPoC

TPAS Log4Shell PoC This repository contains a Proof of Concept PoC for the Log4Shell vulnerability CVE-2021-44228, developed as part of the coursework for the curricular unit TPAS in the Master's degree in Information Security at FCUP. It features: A React SPA frontend that simulates a generic...

sample-ldap-exploit

sample-ldap-exploit A short demo of CVE-2021-44228 Build root@kitploit: $ mvn clean verify Run Attacker root@kitploit: $ java \ -cp 'attacker/target/sample-attacker.jar:attacker/target/lib/' \ sample.attacker.Attacker localhost 1389 sample.payload.Payload 8080 payload/target/sample-payload.jar...