log4j-vul

log4j-vul هذا المشروع يهدف فقط إلى عرض ثغرة Apache Log4j2 - المعروفة باسم CVE-2021-44228 جافا: java version "1.8.0121" الترجمة: من مجلد src javac -classpath .;..\lib\log4j-api-2.1.jar;..\lib\log4j-core-2.1.jar com\example\Log4jVul.java التنفيذ\التشغيل: من مجلد src java -classpath...

log4j-filescan

████████████████▀███████████████████████████████████████████████████████████████████ █▄─▄███─▄▄─█─▄▄▄▄█░█░████▄─▄█▀▀▀▀▀██▄─▄▄─█▄─▄█▄─▄███▄─▄▄─█─▄▄▄▄█─▄▄▄─██▀▄─██▄─▀█▄─▄█ ██─██▀█─██─█─██▄─█▄▄░██─▄█─██████████─▄████─███─██▀██─▄█▀█▄▄▄▄─█─███▀██─▀─███─█▄▀─██...

log4j2-exploit

Log4Shell CVE-2021-44228 Proof of Concept Voraussetzung Java JDK/JRE 8 oder spätere Version curl exploitable Einfache Spring Boot-Anwendung, die eine Login-Seite mit Benutzername und Passwort bereitstellt. Sie protokolliert den Benutzernamen, wenn ein POST an / gesendet wird. Es ist nicht...

log4shell-iocs

Log4Shell-IOCs Feed IOC curati dal WatchGuard Threat Lab che contengono recenti tentativi di sondare o sfruttare CVE-2021-44228 in Log4j2 Commenti degli analisti 2021-12-17 Le minacce condivise in questo feed dovrebbero essere utilizzate per THREAT HUNTING e aggiunte a una WATCHLIST. Raccomandiam...

Log4j-PoC

Proof of Concept für Log4j CVE-2021-44228 Haftungsausschluss Dieses Projekt dient nur zu Bildungszwecken. Einführung Dies ist ein Proof of Concept der Log4j-RCE, adaptiert von HyCraftHD. Hier sind einige Links für CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day...

Awesome-CVE-2021-44228

Awesome-CVE-2021-44228 Eine kuratierte Liste großartiger Repos zu CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n https://github.com/jas502n/Log4j2-CVE-2021-44228...

log4j-test

Esempio semplice che mostra CVE-2021-44228 in azione Spiegazione Per riprodurre questo problema, sto rimuovendo la dipendenza transitiva per il logging da SpringBoot. Invece, sto includendo spring-boot-starter-log4j2 spring-boot-starter-log4j2 include log4j-core che ha la vulnerabilità di...

Log4jPatcher

Log4jPatcher Una mitigazione basata su Java Agent per gli exploit JNDI di Log4j2. Questo agente impiega 2 patch: Disabilitazione di tutte le conversioni Lookup nelle versioni di Log4j supportate in org.apache.logging.log4j.core.pattern.MessagePatternConverter impostando noLookups su true nel...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j In questo laboratorio, l'obiettivo era fare il triage di un'altra vulnerabilità reale e ben nota, Log4Shell, una delle vulnerabilità più sfruttate degli ultimi anni a causa di quanto fosse diffusa la libreria interessata nel software aziendale. Passo 1:...

log4j-remediation-tools

log4j-remediation-tools Strumenti per trovare e riprodurre la vulnerabilità CVE-2021-44228 di log4j2 Strumenti find-vulnerabilities: determina euristicamente se una JVM in esecuzione è vulnerabile confirm-vulnerabilities: determina con precisione al 100% se una JVM in esecuzione è vulnerabile Uso...

Log4jPatch

-- Questo repository è stato archiviato -- Lo sviluppo futuro di questo strumento continuerà su corretto/hotpatch-for-apache-log4j2. Grazie per aver condiviso, commentato, provato e contribuito a questo progetto! Log4jPatch Questo è un POC di un semplice strumento che inietta un agente Java in un...

mc-log4j-patcher

mc-log4j-patcher Sostituisce la vecchia versione di Log4j2 vulnerabile - CVE-2021-44228 con l'ultima 2.15.0 che contiene il fix per la RCE JNDI. Testato su Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 Questo strumento è pensato per correggere server attualmente non supportati, come...

log4j2burpscanner

log4j2burpscanner CVE-2021-44228, log4j2 Burp 플러그인 Java 버전, dnslog은 dnslog.cn이 아닌 도메인을 선택했습니다. 효과는 다음과 같습니다: 실습 환경의 실습 환경은 비교적 느리지만 인터넷 자산은 문제가 없습니다. 이유는 실습 환경이 다른 요청 헤더를 잘 처리하지 못하거나 요청 헤더가 너무 커서 실습 환경의 반응이 느려지는 것이므로, 조금 더 기다리시면 됩니다 SRC 사이트 두 곳을 테스트했습니다 로드 후 URL이 제공되며, 접속하면 DNS 기록을 확인할 수 있습니다. 물론...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Executio...

Unity Linux 20.1070e Security Update: wildfly-security-manager (UTSA-2026-016746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016746 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1070e Security Update: wildfly-common (UTSA-2026-016751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016751 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1060e / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-016673)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016673 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Unity Linux 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-016685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016685 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Unity Linux 20.1070e Security Update: netty (UTSA-2026-016700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016700 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-016724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016724 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...