622 matches found
cve-2021-44228
This Ansible playbook applies a global 'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true' to all users. This mitigates the CVE-2021-44228 exploit for all JVM apps on the hosts in the inventory To exec: ansible-playbook playbook.yml -i inventory...
log4shell-minecraft-demo
Log4Shell CVE-2021-44228 minecraft demo This demo is used at education fairs to give potential future students an idea of the cybersecurity department at HTL Villach and on how everyday applications can be exploited Note: This entire demo uses Minecraft 1.8.8 Attacker The attacker in this scenari...
JNDI-Exploit-1.2-log4shell
JNDI-Exploit-1.2-log4shell Details : CVE-2021-44228 Usage : ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u, --usage Show usage...
JndiRemover
JndiRemover A small mod aimed at eliminating the CVE-2021-44228 vulnerability by removing/disabling Jndi in Log4j and intercepting messages containing the text "$jndi:ldap://domainname.com/script", which will be removed. Supported versions of MC: Forge 1.7.10, 1.12.2...
log4j-vuln-coverage-check
log4j-vuln-coverage-check A simple project to check coverage of Log4J vuln CVE-2021-44228 and related...
CVE-2021-44228-Log4j-lookup-Rce
0x01、Environment Jdk7u21 any version works Affected versions: Apache Log4j 2.x org.apache.logging.log4j log4j-core 2.11.1 Poc import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; public class test2 private static Logger LOGGER = LogManager.getLogger; public static...
log4noshell
Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...
log4j-lookups-vulnerability
log4j-lookups-vulnerability The project based on spring-boot,and the code reveals how Log4j2 Vulnerability CVE-2021-44228 works. The solution for CVE-2021-44228 is on the linked url https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot...
Log4Shell-CVE-2021-44228-Demo
CVE-2021–44228 Demo 1. CVE-2021–44228 Introduction At the end of 2021, the biggest news in the cybersecurity world was the Log4j vulnerability, numbered CVE-2021-44228, also known as Log4Shell. In the CVSS vulnerability scoring system, it was rated the most severe 10 out of 10 , and it is also...
Log4j-Vulnerability
🔓 Log4Shell Vulnerability Demonstration CVE-2021-44228 This project is a controlled test environment allowing you to reproduce and understand the critical Log4Shell vulnerability CVE-2021-44228 affecting the Apache Log4j library. 📁 Project Architecture Secutp1/ ├── Dockerfile Docker image build ├...
log4stdin
log4stdin — log4shell injection for anything with stdout This repository contains a Java application intentionally vulnerable to CVE-2021-44228, colloquially known as log4shell. log4stdin is quite literally nothing more than an stdin-reader, input of which is fed into a vulnerable log4j instance...
CVE-2021-44228
Log4j Vulnerability - CVE-2021-44228 📗 Introduction This vulnerability was discovered on December 9, 2021, identified with CVE-2021-44228 , this flaw affects the java log package, generating a Severity Score CVSS of 10 points , providing execution of remote access to the host. This vulnerability...
log4j-remediation
sakurajilog4j This tool is used to discover and remedidate the Log4Shell vulnerability CVE-2021-45105 by removing the 'JndiLookup.class' file from '.ear|.jar|.war' files on Windows, Linux & Mac OS. Usage: Scan OS for Log4Shell vulnerability. - sakurajilog4j discover - Example:...
log4shell-vulnerable-app
Vulnerable application This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, known as log4shell. It uses log-4j-core:2.14.1 through spring-boot-starter-log4j2 and openjdk:8u181 Running the application Run it: docker run --name vulnerable-app --rm -p 8080:8080...
CVE-2021-44228
🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...
CVE-2021-44228-poc
Log4Shell sample vulnerable application CVE-2021-44228 This is an almost copy/similar vulnerable application to https://github.com/christophetd/log4shell-vulnerable-app The main differences are maven instead of gradle, and the usage of rogue-jndi. This repository contains a maven Spring Boot web...
Log4j-Scanner-Exploit
Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...
Log4Shell-Vulnerability-Replication
CVE-2021-44228 Log4Shell Vulnerability Complete Replication Record This record is based on the Apache Solr 8.11.0 target environment provided by Vulhub, fully replicating the Log4j2 JNDI injection vulnerability, and successfully verifying the vulnerability's existence through DNSLog and local LDA...
l4s-vulnapp
Log4Shell Vulnerable Applicationl4s-vulnapp This is a potentially vulnerable Java web application containing Log4j2.14.1 affected by log4shellCVE-2021-44228. Verified environment and various versions AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1...