LogJackFix

LogJack Fix CVE-2021-44228 Log4j 원격 코드 실행 취약점을 패치하고 Minecraft 클라이언트를 보호하기 위한 Spigot 플러그인입니다. 빌드 root@kitploit: gradle build 라이선스 GPLv3 라이선스 하에 배포됨 Copyright c 2021 lordpipe 기여 본 저장소에 기여함으로써, 나는 다음을 확인합니다: a 기여 내용이 전적 또는 부분적으로 나에 의해 작성되었으며, 해당 파일에 명시된 오픈소스 라이선스에 따라 이를 제출할 권리가 있습니다. 또는 b 기여 내용은 내가 ...

MyLog4Shell

MyLog4Shell log4j RCE 악용 탐지 이 명령어와 규칙을 사용하여 log4j RCE 취약점CVE-2021-44228에 대한 악용 시도를 검색할 수 있습니다. Grep / Zgrep 이 명령어는 /var/log 및 /usr/var/log 폴더와 모든 하위 폴더에 있는 압축되지 않은 파일에서 악용 시도를 검색합니다. root@kitploit: sudo egrep -I -i -r '$|%7Bjndi:ldaps?|rmi|dns|nis|iiop|corba|nds|http:/^\n+' /var/log 이 명령어는...

Log4j-RCE-Scanner

...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Log4j RCE CVE-2021-44228 のスキャナー インストール インストールするには、SUPERUSER（ROOT）で次のコマンドを実行してください。 root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh 使い方 root@kitploit: ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h, --he...

PY-Log4j-RCE-Scanner

Log4j RCE スキャナー このツールを使用すると、Apache Log4j のリモートコマンド実行脆弱性 CVE-2021-44228 を複数のアドレスでスキャンできます。 機能: 指定したURLリストに基づいてスキャンできます。 指定したドメイン名のサブドメインを検出してすべてスキャンできます。 送信元ドメインをプレフィックスとして追加し、DNSクエリがどの送信元から来ているかを特定します。 必要条件 httpx curl ドメイン名でスキャンする場合は、追加で subfinder、assetfinder、amass をインストールする必要があります。 -h, --help -...

Log4Shell

log4shell A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for vulnerability...

FreeBSD : Rundeck3 -- Log4J RCE vulnerability (27c822a0-addc-11ed-a9ee-dca632b19f10)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 27c822a0-addc-11ed-a9ee-dca632b19f10 advisory. - Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are...

Opencast < 9.10, 10.x < 10.6 Log4j RCE Vulnerability (GHSA-mf4f-j588-5xm8, Log4Shell)

Opencast is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Cisco Unified Intelligence Center Log4j RCE

According to its self-reported version, Cisco Unified Intelligence Center is affected by a remote code execution vulnerability. - Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Apache Tika 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)

Apache Tika is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Judge.me : Log4j RCE on https://judge.me/reviews

Summary: CVE-2021-44228, also named Log4Shell or LogJam, is a Remote Code Execution RCE class vulnerability. If attackers manage to exploit it on one of the servers, they gain the ability to execute arbitrary code and potentially take full control of the system. What makes CVE-2021-44228 especial...

Apache Struts 2.5.x Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...