log4v-vuln-check

Log4JS File & Vulnerability Scanner + Local Port Bind Scanner This script is used to perform a fast check to see if your server is possibly affected by CVE-2021-44228 the log4j vulnerability. It does not provide 100% guarantee that you are not vulnerable, but it gives a hint if it is possible tha...

log4shell_scanner

log4shellscanner Quick and dirty scanner, hitting common ports looking for Log4Shell CVE-2021-44228 vulnerability This utilizes wget, curl, nmap, and the Log4Shell Huntress LDAP endpoint: https://log4shell.huntress.com/ If you need to scan a private subnet that doesn't have internet access, you c...

CVE-2021-44228-Apache-Log4j

CVE-2021-44228Apache Log4j Remote Code Execution） Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: 1. 下载该项目，编译InjectClazz.java download git clone...

log4j-quick-scan

log4j-quick-scan Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library. There are far better and advanced tools for security audit, but many of them requires commercial penetration software or external, 3rd party service or software. This script is...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...

log4j-vuln-demo

log4j-vuln-demo Intentionally vulnerable demo image for Sysdig CNAPP scanning and remediation testing. Contains Log4j 2.14.1 — vulnerable to CVE-2021-44228 Log4Shell, CVSS 10.0 Critical. Purpose This repo exists to demonstrate Sysdig's end-to-end CNAPP workflow: 1. /sysdig-investigate — surfaces...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Demonstration Project This is a demonstration project for learning and researching the Log4j2 remote code execution vulnerability Log4Shell. ⚠️ Safety Warning This project is intended for security research and educational purposes only. Do not...

l4j-tp1

log4shell true positive This is a simple web project with a log4shell vulnerability. The project defines a simple scabench.HelloWorldService get service returning a plain text string hello world. The service does not expect parameters, and if parameters are encountered, an error is logged. The...

CVE-2021-44228_IoCs

CVE-2021-44228IoCs Public IoCs for log4j framework vulnerability CVE-2021-44228 log4shell based on multiple public sources...

CVE-2021-44228

Log4Shell Proof-Of-Concept This repository is a Proof-Of-Concept for CVE-2021-44228 vulnerability. It is derived from This Repo. In this repository I have made an example of a vulnerable application and a demonstration of how to exploit it. Proof-of-concept Components I have modified the upstream...

log4shell-spring-framework-research

log4shell-spring-framework-research Research into the implications of CVE-2021-44228 in Spring based applications...

Burp-Log4j-HammerTime

Log4j-HammerTime This Burp Suite Active Scanner extension validates exploitation of the Apache Log4j CVE-2021-44228 and CVE-2021-45046 vulnerabilities. This extension uses the Burp Collaborator to verify the issue. Usage Enable this extension Launch an Active Scan on a specific target if you want...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author: Pinaki Mondal R...

Log4Shell-demo

Log4Shell in action This project aims to demonstrate how the Log4Shell / CVE-2021-44228 vulnerability works. Requirements You only need to have Docker installed. Ideally you have two different virtual machines. One for the vulnerable server and one for the malicious server that will host the...

cve-2021-44228-helpers

CVE-2021-44228 Helpers Helpers, examples, and exploits for cve-2021-44228. Associated blog post: https://blog.uint0.dev/cve-2021-44228/ Helpers Echo chamber cd echochamber Logs input via log4j. Build : ./gradlew build Run : ./gradlew run --console=plain Ldap Exfil Server cd ldap-listener Ldap...

Log4j_CVE-2021-44228

The Log4j vulnerability, also known as "Log4Shell" or "CVE-2021-44228," is a critical security flaw in the Apache Log4j library. Log4j is a widely used Java-based logging framework that allows developers to log messages from applications to various destinations, such as files, databases, and...

log4shell-vulnweb

Copyright © 2023 Red Team 2 this web is vulnerable against CVE-2021-44228...

log4j-pcap-activity

log4j-pcap-activity A fun activity using a packet capture file from the log4j exploit CVE-2021-44228 Instructions Open wireshark and import the PCAP located in this repository: log4j-exploit.pcap. Looking at the packets, answer the following questions. Questions Easy 1. Which Packet numbers conta...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

log4shell_sentinel

Log4Shell Sentinel - A Smart CVE-2021-44228 Scanner Introduction While there have some excellent tools released to help organizations scan their environments for applications vulnerable to the critical Log4J / CVE-2021-44228 vulnerability, I felt that: none of the tools I ran into were made for...