log4j2-exploit

Log4Shell CVE-2021-44228 proof of concept Requirement Java JDK/JRE 8 or later version curl exploitable Simple spring boot application that serves a login page with user and password. It logs the user name when POSTed to /. It is not required for the application to log any user provided input...

jndi-ldap-test-server

jndi-ldap-test-server This is a minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. How to test vulnerability to CVE-2021-44228 1. Download the test server binary for your platform you can find all binaries under Release...

CVE-2021-44228-PoC-log4j-bypass-words

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on 🐱‍💻 ✂️ 🤬 LOG4J Java exploit - WAF and patches bypass tricks 📝 Description CVE-2021-44228 works on: log4j: 2.0 = Apache log4j = 2.14.1 Java version already patched: 6u211+, 7u201+, 8u191+, 11.0.1+. Windows...

TPASLog4ShellPoC

TPAS Log4Shell PoC This repository contains a Proof of Concept PoC for the Log4Shell vulnerability CVE-2021-44228, developed as part of the coursework for the curricular unit TPAS in the Master's degree in Information Security at FCUP. It features: A React SPA frontend that simulates a generic...

log4j_github_repository

This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...