log4j-scan

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

log4shell4shell

log4shell4shell Log4j - Multitool. Find & fix possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment Features Check your Linux/Mac/BSD and Windows System for CVE-2021-44228 vulneraries Fix your system by deleting log4j java class / or setting some enviroment...

log4shell-rmi-poc

log4shell-rmi-poc A Proof of Concept of the Log4j vulnerability CVE-2021-44228 over Java-RMI It uses Log4j 2.5.7 from spring-boot-starter-log4j2 Requirements: Tested with Java 8 JDK 1.8.025 and Java 11 JDK 11.0.1 How to run the POC 1. Clone the repo: root@kitploit: git clone...

damn-vulnerable-log4j-app

SnapAttack Log4j / CVE-2021-44228 / log4shell Resources What's included? Damn Vulnerable Log4j App damn-vulnerable-log4j-app contains a basic vulnerable Java Servlet that logs the User Agent, HTTP GET and POST parameters with log4j. It is packaged as a .war file and can be deployed to servers lik...

log4j_RCE_CVE-2021-44832

Log4j 2.17.0 RCE -- CVE-2021-44832 Reproduction 1. Start the malicious JNDI server root@kitploit: java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "/System/Applications/Calculator.app/Contents/MacOS/Calculator" -A "127.0.0.1" 2. Modify the DataSource section in config/log4j2.xml to your...

Log4JShell-Bytecode-Detector

🔍 Log4JShell Bytecode Detector Log4jShell Bytecode Detector is an open source tool that helps identify if a jar file is affected by the critical CVE-2021-44228. The tool scans the jar file and compares the classses against a set of vulnerable hashes for classes within the jar file. The hashes hav...

log4j

CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...

Log4J-Simulation-Tool

About The Project This is a specially crafted automated Vulnerability Scanner, Patch Management and Exploitation tool for CVE-2021-44228. This is a combination of Python, Java and Linux shell program which will make it easier for a Network Administrator, Endpoint Security Developers and...

Log4shell

Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage root@kitploit: docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...

CVE-2017-5645

CVE-2017-5645 CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization...

Log4j-JNDIServer

Log4j-JNDIServer This project will help to test the Log4j CVE-2021-44228/CVE-2021-45046 vulnerabilities. Installation and Building Load the project on Intellij Idea Select JDK in "Projects Settings" CTRL + ALT + SHIFT + S In "Project Settings", create the Artifact - "Artifacts" - "Create JAR from...

log4j-ioc-detector

log4j Linux IoC Detector A basic Bash script to detect log4j Indicator of Compromise IoC in Linux. How to Use 1. Clone this repository: root@kitploit: git clone https://github.com/santosomar/log4j-ioc-detector 2. Run the the log4jiocdetector.sh script, as demonstrated below: root@kitploit: bash...

CVE-2021-44228_PoC

POC for CVE-2021-44228 This python script was created while I was working on the TryHackMe room for Log4j. While this was created with default variables for this room, I used argparse to make the script versatile for a GET request. All necessary varaibles can be changed with different options, se...

log4j-cve-2021-44228

Playbook del escáner detector de Log4j-CVE-2021-44228 Playbook de Ansible para verificar hosts Linux de destino usando el script detector de Log4j oficial de Red Hat para Log4Shell CVE-2021-44228. Detector de Red Hat versión 1.3, 2022-01-10. El resultado se guarda en un archivo txt dentro de...

spring-boot-log4j-cve-2021-44228-docker-lab

Spring Boot Log4j - CVE-2021-44228 The Log4Shell vulnerability CVE-2021-44228 ultimately is a quite simple JNDI Injection flaw, but in a really really bad place. Log4J will perform a JNDI lookup while expanding placeholders in logging messages or indirectly as parameters for formatted messages...

log4j-shell-csw

Log4j Simple Exploit A Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability. Log4j, which is used to log security and performance information, impacts upwards of 3 billion devices that use Java across a variety of consumer and enterprise services, websites and applications, as well as medica...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 How To Run? root@kitploit: php log4j.php https://1337.com Requirements PHP CURL PAYLOAD DNS LOG Collaborator Burpsuite or use dnslog.cn List Payload root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId $docker:containerName...

test-44228

test-44228 A simple example for CVE-2021-44228 Implements two java CLIs, one using log4j v1.x, the other using log4j 2.x to demonstrate the log4shell vulnerability. See also: https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.oracle.com/security-alerts/alert-cve-2021-44228.html Usage...

log4j-cve-2021-44228

Log4j CVE-2021-44228 and CVE-2021-45046 Requisites Use a vulnerable JDK, for instance JDK 1.8.0181 Usage Malicious server The malicious server deploys the following endpoints: 1389 LDAP server 1099 RMI server 8081 HTTP server root@kitploit: ./gradlew :malicious-server:bootRun Vulnerable applicati...

Get-log4j-Windows-local

Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description:...