Log4j-RCE-Exploiter

Log4j-RCE-Exploiter 针对 Log4j RCE CVE-2021-44228 的扫描器 安装 安装时，请以超级用户（ROOT）身份运行以下命令： root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh 使用 root@kitploit: ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h, --help Display help -l,...

LogJackFix

LogJack Fix CVE-2021-44228 Log4j のリモートコード実行脆弱性を修正し、Minecraft クライアントを保護する Spigot プラグインです。 ビルド root@kitploit: gradle build ライセンス GPLv3 のもとでライセンスされています。 Copyright c 2021 lordpipe コントリビューション このリポジトリに貢献することにより、私は以下を確約します： a その貢献は、私によって全体または一部が作成されたものであり、私がファイルに示されたオープンソースライセンスのもとで提出する権利を有していること。または b...

MyLog4Shell

MyLog4Shell log4j RCE 漏洞利用检测 你可以使用以下命令和规则来搜索针对 log4j RCE 漏洞 CVE-2021-44228 的漏洞利用尝试。 Grep / Zgrep 此命令在文件夹 /var/log - '/usr/var/log' 及其所有子文件夹的未压缩文件中搜索漏洞利用尝试。 root@kitploit: sudo egrep -I -i -r '$|%7Bjndi:ldaps?|rmi|dns|nis|iiop|corba|nds|http:/^\n+' /var/log 此命令在文件夹 /var/log...

Log4j-RCE-Scanner

...

PY-Log4j-RCE-Scanner

Log4j RCE Scanner 使用此工具，您可以扫描多个地址上 Apache Log4j 的远程命令执行漏洞 CVE-2021-44228。 功能： 它可以根据您提供的 URL 列表进行扫描。 它可以通过查找您给出的域名的子域来扫描所有内容。 它会将源域名添加为前缀，以确定传入的 DNS 查询来自哪个来源。 要求 httpx curl 如果您想使用域名进行扫描，则必须另外安装 subfinder、assetfinder 和 amass。 -h, --help - 显示帮助 -l, --url-list - 用于扫描的域名/子域/IP 列表。 -d, --domain -...

Log4Shell

log4shell A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for vulnerability...

FreeBSD : Rundeck3 -- Log4J RCE vulnerability (27c822a0-addc-11ed-a9ee-dca632b19f10)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 27c822a0-addc-11ed-a9ee-dca632b19f10 advisory. - Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are...

Opencast < 9.10, 10.x < 10.6 Log4j RCE Vulnerability (GHSA-mf4f-j588-5xm8, Log4Shell)

Opencast is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Cisco Unified Intelligence Center Log4j RCE

According to its self-reported version, Cisco Unified Intelligence Center is affected by a remote code execution vulnerability. - Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Apache Tika 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)

Apache Tika is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Judge.me : Log4j RCE on https://judge.me/reviews

Summary: CVE-2021-44228, also named Log4Shell or LogJam, is a Remote Code Execution RCE class vulnerability. If attackers manage to exploit it on one of the servers, they gain the ability to execute arbitrary code and potentially take full control of the system. What makes CVE-2021-44228 especial...

Apache Struts 2.5.x Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...