log4j-CVE-2021-4104

HEAD Log4jShell1.x Log4j RCE 1.x Poc Attack Restriction 1. The target has jms environment 2. You need to gain access to modify the log4j.properties file Conclusion Not as useful as log4shell 2.x Log4shell Topic https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Welcome to contribute in...

log4shell-rmi-poc

log4shell-rmi-poc A Proof of Concept of the Log4j vulnerability CVE-2021-44228 over Java-RMI It uses Log4j 2.5.7 from spring-boot-starter-log4j2 Requirements: Tested with Java 8 JDK 1.8.025 and Java 11 JDK 11.0.1 How to run the POC 1. Clone the repo: root@kitploit: git clone...

log4j-poc

This repository does not have a README...

CVE-2021-44228-Apache-Log4j-Rce-main

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

log4j

CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...

log4j-docker

Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images root@kitploit: cd...

XSYS-Log4J2Shell-Ex

XSYS-Log4J2Shell-Ex CVE-2021-44228 log4j2shell PoC as part of a security research for a vulnerability patch Overview root@kitploit: In this repository I will cover several topics and implementations which provide a PROOF OF CONCEPT regarding the Log4J 2.17.0 vulnerability . The main goal is to...

Log4j-Updater

Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in. log4jupdater.sh is a simple bash script with the a...

https-github.com-pravin-pp-log4j2-CVE-2021-45105-1

Sample Log4j2 vulnerable application CVE-2021-45105 Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Java IDE as ...

log4shell-finder

log4shell-finder - Fastest file system scanner for log4j instances Python port of https://github.com/mergebase/log4j-detector log4j-detector is copyright C Copyright 2021 Mergebase Software Inc. https://mergebase.com/ Licensed via GPLv3. Motivation for porting to Python was to improve perfomance,...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

CVE-2021-44228-Apache-Log4j-Rce

Usage: 1. running RMIServer 2. running Main...

log4j-rce-test

Build ./build.sh Start log4j RCE Server ./start-log4j-rce-server.sh Test Run java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Check if you get logs in hack.log from current folder You can change this line String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + " ./hack.log" ; in file...

log4j-shell-csw

Log4j Simple Exploit A Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability. Log4j, which is used to log security and performance information, impacts upwards of 3 billion devices that use Java across a variety of consumer and enterprise services, websites and applications, as well as medica...

log4j-scanner

log4j-scanner Check CVE-2021-44228 vulnerability This test is not 100% reliable, but it helps with a quick scan How tu use: root@kitploit: wget https://raw.githubusercontent.com/codiobert/log4j-scanner/main/log4j-scanner.sh -q -O - |bash...

log4j-urlscanner

log4j-detect Script simple en Python 3 para detectar la vulnerabilidad de la biblioteca Java "Log4j" CVE-2021-44228 en una lista de URL con multihilo El script "log4j-detect.py" desarrollado en Python 3 se encarga de detectar si una lista de URLs son vulnerables a CVE-2021-44228. Para ello, envía...

CVE-2021-45046-Info

CVE-2021-45046-Info Oh no another one POC root@kitploit: $ctx:apiversion - %dyyyy-MM-dd HH:mm:ss %-5p %c1:%L - %mnolookups%n LINKS https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/...

log4j-honeypot-flask

log4j-honeypot-flask Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228 This can be installed on a workstation or server, either by running the Python app/app.py script directly you'll need python3, Flask, and Requests or as a Dock...

Log4j-CVE-2021-44228

Log4j-CVE-2021-44228 Mass Check Vulnerable Log4j CVE-2021-44228 Introduction Actually I just checked via Vulnerable Application from https://github.com/christophetd/log4shell-vulnerable-app because I'm lazy to find live target xD so you can develop or change this code according to your knowledge ...

log4j_scanner_wrapper

Wrapper for scanning Linux directories for log4j vulnerability CVE-2021-44228. Pulling from https://github.com/logpresso/CVE-2021-44228-Scanner. Credit goes here. Scans most suspecting main directories and will exclude nfs mounts. Usage root@kitploit: bash log4jscanner.sh optionaljavapath Written...