3182 matches found
CVE-2021-44228-docker-example
CVE-2021-44228-docker-example A simple demonstration of CVE-2021-44228 to transfer data from a vulnerable server to a web service controlled by an attacker. All components involved are running via Docker. Components vulnerable-server This is a standard Java server acting as the victim. It's...
CVE-2022-RCE
CVE-2022-XXXX Reverse junk data injection CVE subscription tools exploitation tutorials Exploit POC RCE LOG4j deserialization JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559...
Log4Shell_CVE-2021-44228_related_attacks_IOCs
Log4Shell（CVE-2021-44228）related attacks IOCs Source IPs attempting attacks using Apache Log4j RCE, including a large number of Tor nodes, see Attack-IP.md IOCs for malware, botnets, etc. propagated via the Log4j vulnerability, see IOC-C2.md Snort detection rules, see Snort.md Suricata rules, see...
hka-seminar-log4shell
Seminar Paper - Log4Shell Vulnerability Demonstration CVE-2021-44228 Security Notice This repository is intended exclusively for educational and demonstration purposes as part of a security-related seminar paper. Do not use this code in production environments or against systems without explicit...
CVE-2023-50780
CVE-2023-50780: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ Artemis By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/console/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J indirectly resulting ...
log4j-CVE-2021-44228-test
log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...
CVE-2021-44228
🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...
Log4Shell-CVE-2021-44228-
Log4Shell CVE-2021-44228 - SOC Report Analysis Overview This repository contains a comprehensive Security Operations Center SOC analysis of Log4Shell CVE-2021-44228 , one of the most critical vulnerabilities discovered in 2021. The vulnerability affects the Apache Log4j logging library and poses ...
Log4j-CVE-Detect
Log4J-CVE-Detect This repository contains a set of YARA rules for detecting versions of log4j which are vulnerable to CVE-2021-44228, CVE-2021-45046, and / or CVE-2021-45105 by looking for a number of features which appear in affected versions. This tool works recursively on binary files such as...
Log4Shell
CVE-2021-44228: Log4j / Log4Shell Security Research Summary This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell. Threat Intel Mitigations / Fixes Malware Reports Advisory IOCs / Callback Domains / IP Addresses...
log4j-check
log4j-check A self-check tool for the 2025/2026 batch of Log4j "silent configuration failure" advisories. Zero runtime dependencies, a single jar, no network access. ⚠️ Let's be clear about the scope first: this entire batch is medium severity, not a single RCE among them — it's not the Log4Shell...
log4j-docker
Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images cd /web-server make...
log4j-jndi-be-gone
log4j-jndi-be-gone A Byte Buddy Java agent-based fix for CVE-2021-44228, the log4j 2.x "JNDI LDAP" vulnerability. It does three things: Disables the internal method handler for jndi: format strings "lookups". Logs a message to System.err i.e stderr indicating that a log4j JNDI attempt has been ma...
CVE-2019-17571
CVE-2019-17571 / Apache Log4j 1.2.X Deserialization Remote Code Execution Vulnerability Vulnerability warning reference link: https://mp.weixin.qq.com/s/okU2y0izfnKXXtXG3EfLkQ 1. Vulnerability Description Apache Log4j is a Java-based open-source logging tool developed by the Apache Software...
tharindudh-Log4j-Vulnerability-in-Ghidra-tool-CVE-2021-44228
tharindudh-Log4j-Vulnerability-in-Ghidra-tool-CVE-2021-44228...
nmap-log4shell
Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-2021-44228 nmap-log4shell is a NSE script for discovery Apache Log4j RCE CVE-2021-44228 vulnerability across the network. The script is able to inject the log4shell exploit payload via HTTP Headers default or via TCP/UDP socket...
CVE-2021-44228
CVE-2021-44228 checker This is the repository for checking for vulnerability CVE-2021-44228. This is a PoC that only displays strings without any external class loading. It cannot be used for arbitrary code execution. How it works? Step 1: Run the server application The image...
PS-CVE-2021-44228
PS-CVE-2021-44228 Static detection of vulnerable log4j librairies on Windows members of an AD domain. Uses detection tool binary provided by @1lann : https://github.com/1lann/log4shelldetect Prerequisites Administrator privileges on targeted computers. Active Directory PowerShell module...
log4shell-test-exploit
Test exploit of CVE-2021-44228 log4shell Preparation Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git cd marshalsec m...