3174 matches found
RS4LOGJ-CVE-2021-44228
RS4LOGJ-CVE-2021-44228 Apache Log4j vulnerability - CVE-2021-44228 instructions for Remote Syslog: Remote Syslog uses the Elasticsearch module to save logging. Effected products: RSv2 RSE RSX RSC is not effected. Check: Check version: curl -XGET 'http://localhost:9200' Output: "number" : "7.16.2"...
exploit-CVE-2021-44228
CVE-2021-44228 – Log4j RCE Unauthenticated About This is a proof-of-concept exploit for Log4j RCE Unauthenticated CVE-2021-44228. This vulnerability affects versions 2.15.0. For more information: https://www.fastly.com/blog/digging-deeper-into-log4shell-0day-rce-exploit-found-in-log4j Contributor...
CVE-2021-44228-Apache-Log4j-Rce-main
CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...
LogMePwn
LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...
CVE-2022-RCE
CVE-2022-XXXX Reverse junk data injection CVE subscription tools exploitation tutorials Exploit POC RCE LOG4j deserialization JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559...
log4j2_vul_local_scanner
Log4j2 Vulnerability Local Scanner CVE-2021-45046 Log4j vulnerability local detection script, scans all java processes on the host, detects whether a vulnerable log4j-core jar package has been introduced, and whether it may be subject to remote code execution attacks CVE-2021-45046. Uploads the...
CVE-2021-44228-PoC
CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...
Log4j-CVE-2021-44228
This repository does not have a README...
Log4J-Simulation-Tool
About The Project This is a specially crafted automated Vulnerability Scanner, Patch Management and Exploitation tool for CVE-2021-44228. This is a combination of Python, Java and Linux shell program which will make it easier for a Network Administrator, Endpoint Security Developers and...
cve-2021-44228-minecraft-poc
CVE-2021-44228 in Minecraft Java 16 Paper server build 397 Minecraft 1.17.1 Exploitation In Java 16 only deserialization attacks work by default using log4j. To exploit this there needs to be a vulnerable serializable class in the classpath. In the current state of this repository the server will...
Log4J-Exploits
Log4J-Exploits Log4J Exploits for Different Systems...
Log4Shell
Log4Shell This repository is for Log4j 2021 CVE-2021-44228 Vulnerability demonstration and mitigation. What is Log4Shell? The CVE-2021-44228 / Log4Shell vulnerability consists of injecting vulnerable software with a malicious payload, which will ask Log4J to obtain a value from a third-party...
log4j
Log4j version 1.2.17-aims This jar was created to protect against CVE-2021-4104. It is meant to be used as a direct replacement for Log4j v1 libraries. Log4j 1.2 project page: https://logging.apache.org/log4j/1.2/ Apache 2.0 Licence: https://www.apache.org/licenses/LICENSE-2.0 Usage Add this to...
log4j_scanner
Filesystem log4jscanner for windows and Unix. Scanning for CVE-2021-44228, CVE-2021-45046, CVE-2019-17571, CVE-2021-44832 Requires a minimum of Python 2.7. Can be executed as Custom Script Rule of an Audit or via a Server Script with Server Automation. Also executable standalone from the command...
Search-log4Jvuln-AppScanSTD
Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...
log4j-CVE-2021-44228-workaround
log4j-CVE-2021-44228-workaround A. Solution Description This project provides a general purpose workaround for the log4j CVE-2021-44228 vulnerability, which can be used in case you do not have the alternative in short term to re-build your respective project or to patch the log4j-core jars. The...
log4j-vulnerability
Log4Shell CVE-2021-44228 is a zero-day vulnerability in Log4j Log4J Vulnerability Discovered: 24th November 2021 Patched: 6th December 2021 Attack Demo Click below for youtube video Sample application This sample application is spring boot application, and is using log4j as a logging framework, a...
log4j-scan
log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...
log4shell
log4shell Python Script to scan the server file system for log4j jars that are vulnerable to CVE-2021-44228 and CVE-2021-45046. The script recursively goes through the file system including zip, ear, war to find log4j versions 2. to 2.15 with org/apache/logging/log4j/core/lookup/JndiLookup.class...